Terminate and disconnected session

[ramalhotra]

Hello Everyone

I would like to activate policy "Terminate and disconnected session" after 5 minutes for Non Administrator users only. When I enable this policy in MMC through Snap-in , it does not work. But when I activate it trough TSPLUS Group Policy , it works fine but for all users including Administrator. How I can activate this policy for Non Administrator users only. I have also tried to enable it from User menu but id does not work.

Can anybody has suggestion.

Regards
Rajesh

[admin]

Hello,

Please follow this procedure for applying GPO for non admin users only : http://support.tsplus.net/kb/faq.php?id=19

If your server is the member of a domain, this strategy may need to be set directly on the domain controller.
Open your domain strategy object editor (gpedit.msc) and locate the following strategy :

Computer configuration / Administrative Template / Windows components / Remote Desktop Services / Remote Desktop Session Host / Session time limit /

You can also make sure your domain controller do not prevent local strategies to be executed. This strategy needs to be disabled and is located in :

Computer configuration / Policies / Administrative Template / System / Group Policy / Turn off Local Group Policy objects processing.

Either solution should work, choose the one that fits your preference.

Regards,
TSplus support team

[ramalhotra]

Hi Olivier

Thanks for the reply.

As explained in my first message, I have already tried your given suggestion i.e. enabled this group policy through MMC.EXE Snap-In for Non Administrator users. But it does not work. Kindly check my settings in enclosed snap shot.

If I set this policy through TSPLUS console (Group Policies). It gets implemented successfully for all the users including Administrator. I feel that the settings of GPO of TSPLUS are being override to the GPO policies of MMC in this case.

Rest all policies works well for Non Administrator users set through MMC Snap-in like "Hiding Drives" etc.

Please guide what can be the problem.

Regards
Rajesh

[admin]

Hello,

As mentioned above, if your server is joined to a domain, you may need to either activate these GPO on your domain controller and / or allow local GPO to be accepted.

There is no other way around this windows behavior.

[ramalhotra]

Hi Olivier

My server is not joint to any domain. It is without Active Directory Domain Controller.

So I have enabled this policy for Non Administrator users through MMC (Snap-In) as per procedure given by you. But it does not work. This policy works if I put the disconnection time in TSPLUS Console Group Policy option (Server Section). But it get implemented for all users including Administrator.

Regards
Rajesh

[admin]

Hello,

That is because you either also activated this GPO for all users and / or have your admin users be also members of domain users groups. Another point to take into account is that GPO's may not activate right away, some require some time, or a reboot. You can also use a command prompt and use the gpupdate /force command for this purpose.