GPO / RemoteApp / HTML5

[ramalhotra]

Hello Everyone

I am using TSPLUS since last 3 years and very well satisfied with its performance and working. Its really nice product. Users are being connected through RemoteApp portable client as well as from HTML5 Web browser.

I need your help in following issues. The TSPLUS has been hosted on Windows Server 2012 R2.

1) “Terminate any disconnect session after” in Group Policies
In AdminTool, I have setup the value to 0 (Never) and it works well for all the users without any problem. But I need to setup this property only for Administrator. i.e. All Non Administrator users must be logged off after one minute of disconnected session. For this I have created a Non Administrator console via MMC and enabled the “Set Time limit for disconnected session” with value one minute (in Session Time Limit section) . It should work for Non Administrator users but unfortunately it does not work. Where as all other policies like “Hide Hard Drive “ works well for this console of Non Administrator. What can be the reason for not working of logging off after one minute for Non Administrator users.


2) RemoteApp Portable Client Generator
a) Is it possible to change the title login screen. It shows “Remote Access”. Can it be changed or kept it blank.
b) While connecting to server with RemoteApp clinet, it shows the connection pop up screen “RemoteApp connecting to Ip ………” . Is it possible to hide this screen. In Seamless client no such screen was there. But Seamless client is not more available now. End user should not be aware the Static IP / Domain to which connection is made for security reason.

3) HTML5 connection from web browser
Can we restrict any user to log on / connect from web browser i.e. they should be able to connect from portable client generator only.

Best Regards
Rajesh Malhotra

[admin]

Hello,

1) In the AdminTool, click on the Server tile and click on "Group Policies (GPO)"

You can set up a timeout for disconnected sessions which will cause a disconnected user session to automatically logoff after a while.

If you want your disconnected sessions to terminate quickly, type in 0.5 for 30 sec. Enter 0 if you want your remote sessions to never end.

If your server is the member of a domain, this strategy may need to be set directly on the domain controller.
Open your domain strategy object editor (gpedit.msc) and locate the following strategy :

Computer configuration / Administrative Template / Windows components / Remote Desktop Services / Remote Desktop Session Host / Session time limit /

You can also make sure your domain controller do not prevent local strategies to be executed. This strategy needs to be disabled and is located in :

Computer configuration / Policies / Administrative Template / System / Group Policy / Turn off Local Group Policy objects processing.

Either solution should work, choose the one that fits your preference.

If you are experiencing this issue with the HTML5 web client, edit the settings.js file with notepad located in C:\Program Files (x86)\TSplus\Clients\www\software\html5

And modify the W.send_logoff = true parameter to false.



2)
a- No, this is not possible.
b- No, this is not possible.

3) Yes, in the security tile of the admin tool / advanced security tile.

[ramalhotra]

Dear Olivier

Thanks for your reply.

1) My server is not member of domain. It is working as local workgroup. I need to terminate disconnected session only for Non Administrator users i.e. Administrator should not be terminated after disconnection, as some process are required to be run always. This is the reason I have opt for MMC and created console of Non Administrator and implemented this policy on that console via
Computer configuration / Administrative Template / Windows components / Remote Desktop Services / Remote Desktop Session Host / Session time limit / (From MMC and not from gpedit.msc). In AdminTool "Group Policies (GPO)" I have kept the time 0 seconds (Never). May this GPO setting of AdminTool override the policies of MMC. How to achieve it, Kindly guide.

2) Noted about RempteApp.

3) In Admin tool / Advanced Security Tile, following option are available.
a) No Restrictions
b) Web Portal Access is Mandatory for everyone.
c) Web Portal is Mandatory except for Admins
d) Prohibit the Web Portal for Admin Accounts.

I need to restrict certain users (or specific user) to log from Web Portal and not everyone. How to do it , Please advise.

Best Regards
Rajesh Malhotra

[admin]

Hello,

Ok in your case I recommend you to use default settings in the admin tool and use this procedure to apply GPO to non admin users : https://support.tsplus.net/kb/faq.php?id=19

[ramalhotra]

Hello,

I have already used the same procedure as mentioned in the URL given by you. But still the session is not terminated after certain time of disconnection. In AdminTool, the sessions of users remains in disconnected form and do not logout. Most of the time it happens when the user connect from RemoteApp portable generated client. From HTML5 there is no such issue and user gets logout immediately. In AdminTool "Group Policies (GPO)" I have kept the time 0 seconds (Never). When here I change to 1 minute then all user including Administrator gets log off after one minute of disconnection.

Need clarification about below regarding restriction of login from web portal.
3) In Admin tool / Advanced Security Tile, following option are available.
a) No Restrictions
b) Web Portal Access is Mandatory for everyone.
c) Web Portal is Mandatory except for Admins
d) Prohibit the Web Portal for Admin Accounts.

I need to restrict certain users (or specific user) to log from Web Portal and not everyone. How to do it , Please advise.

Best Regards
Rajesh Malhotra

[admin]

Hello,

If this issue is related to the use of the RemoteApp connection client then do not use it or change it to a different connection method. This can be done in the admin tool / web tile / HTML5 client. change RemoteApp to Remote desktop and try again. Your published application may not support being launched with Remote App.