SSL must be setup. Make sure control is using https and is set for redirect to it you can find the instructions on how to setup SSL here.

https://docs.connectwise.com/ConnectWise_Control_Documentation/On-premises/Advanced_setup/SSL_certificate_installation

Admin -> Configuration -> Web Configuration:Page Settings:

Page Idle Timeout is set

  1. Set Admin Page to Require at least two Authentication Factor

*** Optional ***

  1. Restrict to IP addresses. Set the Host Page to the their IP address

Admin -> Configuration -> Web Configuration:Session Settings:

1. Access Token Expire Seconds set to 28800 seconds (8 Hours)

Admin > Configuration -> Web Configuration:Other Settings:

1. “Trust this device” duration set to 0

Admin -> Configuration -> Disable Host Client Menu Items: System Options

1. Set the Hide (Connection Banner) to not set

Admin -> Configuration > Disable Host Client Menu Items: Participant and Screen Capture

  1. Take Screenshot to Clipboard is disabled
  2. Take a screenshot to file is disabled
  3. Record Video of the current session is disabled

Admin -> Configuration -> Disable Host Client Menu Items:Essentials

1. Manage Credentials is Disabled

Admin -> Configuration -> Application Configuration:Other Settings

  1. Lock Machine on Connect on Support and Access Sessions
  2. Disable Clipboard Capture is checked
  3. Always End Session is checked
  4. Allow Guest initiated File transfer is not checked
  5. Allow Login Credentials Storage is not checked

Admin -> Configuration -> Application Configuration:Quick Settings

  1. Show Host Connected Banner on Support and Access Sessions is checked
  2. Show End of Session Dialog is checked
  3. Show Notification Balloon on Connect is checked on All
  4. Lock Guest Machine on Support and Access is checked
  5. Show End of Session Dialog is checked