4

We have a Windows Server 2016 Remote Desktop session host with Session Broker and Gateway.

The collection settings specify all session limits as "never". Sessions are logged off six hours after disconnection (found this in the eventlog).

I created a GPO which also specifies the session limits to never for the computer configuration, but this didn't help.

I checked the registry, and the keys are correct:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services] "MaxDisconnectionTime"=dword:00000000 "MaxIdleTime"=dword:00000000 "MaxConnectionTime"=dword:00000000 "fResetBroken"=dword:00000000

I checked the user objects in AD, and on the users the "session" tab also states "never" on all settings.

Next I checked the RD Gateway policies, but also there, no limits specified...

This happens on all users logging in to the RDS.

Is there any other place where session limits can be set?

EDIT: screenshots of settings:

Collection: Collection User:

User

GPO: GPO Settings

Gateway policies: enter image description here

Improve this question
5
  • You sure the GPOs get applied correctly? Does some local security policy override your settings maybe? Please specify what you mean by "all settings", maybe you did forget to set some. Commented Sep 13, 2017 at 7:31
  • I've added screenshots of the settings Commented Sep 13, 2017 at 12:58
  • There should be at least two computer configuration policies, try to set them, too Commented Sep 14, 2017 at 7:55
  • Sorry for the late reply. What do you mean by 2 computer policies? I know only of one, the one which is shown in the screenshot above. Commented Oct 9, 2017 at 6:55
  • Just got informed by our customer that the issue has been solved. I have no idea what happened, but it seems the above settings took some "days" before getting applied (although server was rebooted and GPO's where manually applied). Commented Oct 9, 2017 at 8:06

1 Answer 1

Reset to default
0

Issuing gpupdate /force will make sure the GPO policies are applied to every system affected.

The 'delay' you mention seems an indication this was not used.

Improve this answer

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.