Home | Troubleshooting |  Quick Setup  |  Cisco How to  |  Wireless  |  Forums   | Site Map | Services  | About Us | Chicagotech MVP  | Search  | Contact Us  |              

 

 

How to Setup Terminal Services Group Policy Objects for Windows 2003 and XP

You can manage XP Remote Desktop and  Windows 2003 Terminal Services connections and sessions using Group Policy. Most Terminal Services policies can be set and changed in the following folder locations:

•

Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services

•

Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services folder, the following settings can be made:

•

Limit users to one remote session

•

Allow screensaver

•

Limit number of connections

•

Limit maximum color depth

•

Do not allow new client connections

•

Do not allow local administrators to customize permissions

•

Remove windows security item from Start menu

•

Remove disconnect item from Shut Down dialog

•

Set path for Terminal Services (TS) roaming profiles

•

TS user home directory

•

Remote control settings

•

Start a program on connection

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Client\Server data redirection folder, the following settings can be made:

•

Do not allow clipboard redirection

•

Allow audio redirection

•

Do not allow COM port redirection

•

Do not allow client printer redirection

•

Do not allow LPT port redirection

•

Do not allow drive redirection

•

Do not set default client printer to be default printer in a session

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Encryption and Security folder, the following settings can be made:

•

Always prompt client for password upon connection

•

Set client connection encryption level

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Temporary Folders folder, the following settings can be made:

•

Do not use temp folders per session

•

Do not delete temp folders upon exit

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Session Directory folder, the following settings can be made:

•

Session Directory active

•

Session Directory Server

•

Session Directory Cluster name

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions folder, the following settings can be made:

•

Set time limit for disconnected sessions

•

Set time limit for active sessions

•

Set time limit for idle sessions

•

Allow connection from original client only

•

Terminate session when time limits are reached

Under the Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services folder, the following settings can be made:

•

Start a program on connection

•

Remote control settings

Under the Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions folder, the following settings can be made:

•

Set time limit for disconnected sessions

•

Set time limit for active sessions

•

Set time limit for idle sessions

•

Allow connection from original client only

•

Terminate session when time limits are reached

To find out what each of these settings does, open the MMC and Group Policy object as outlined in the following steps, select the item that you want to learn about, and then click the extended tab in the lower left of the right pane of the MMC.

To access the Group Policy MMC snap-in:

1.

Click Start.

2.

Click Run, type: MMC, and then press ENTER.

3.

Click File, and then click Add/Remove Snap-in.

4.

On the Standalone tab, click Add, and then click Group Policy.

5.

Click Add, and then click Finish.

6.

Click Close, and then click OK. Local Computer Policy is located under the console root.

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics

Exchange Case Studies

Exchange Case Studies. Can’t send/receive email to/from outside ... Your account in Microsoft Exchange Server doest not have permission to synchronize with ...
www.chicagotech.net/casestudy/exchangecases.htm

Exchange Server

How to remove the Exchange Server 5.5 computer from an Exchange 2000 administrative group ... You successfully create a new mailbox on your Exchange Server, ...
www.chicagotech.net/exchange.htm

Unexpected Exchange mailbox server error

Your account in Microsoft Exchange Server doest not have permission to ... The Event Viewer lists Event ID 3005 - Unexpected Exchange mailbox Server error: ...
www.chicagotech.net/troubleshooting/event3005.htm

Troubleshooting exchange issues

Your account in Microsoft Exchange Server doest not have permission to synchronize with ... Can't start NNTP and IMAP services under Exchange System Manger ...
www.chicagotech.net/troubleshootingexchange.htm


 

 


 

 

Hit Counter   This web is provided "AS IS" with no warranties.
Copyright © 2002-2015 ChicagoTech.net, All rights reserved. Unauthorized reproduction forbidden.