Forum Discussion
kpr208
May 23, 2022Copper Contributor
Idle time out GPO for Remote Desktop Services sessions not working in Windows 2019 servers
I have configured GPO to Set time limit for active but idle Remote Desktop Services sessions. Policy has been set to disconnect sessions which are idle for more than 3 hours. But I am getting warning...
Austin_M
May 25, 2022Brass Contributor
Hello kpr208,
If you face a session time-limit policy issue that gets disconnected after the meantime. You can follow the steps below in order to fix the issue,
By default, the user’s RDP session in Windows may stay disconnected until the user or administrator terminates, or the computer is restarted. However, it is quite convenient since a user may connect to his old RDP session and go on working with running programs.
In order to terminate disconnected RDP/RDS sessions automatically in a specified time period, you need to set session limits (time-outs) correctly. If you are using an RDS server, you will have to configure session time-out parameters from the RDS collection settings in the Session tab menu.
You will have to Specify the time period after which you want to disconnect the RDP session. Lastly, a disconnected session option (by default, a session period is unlimited – Never). Thus, you can set the maximum duration of an active session (Active session limit) and end an idle session (Idle session limit). These hard time-outs are applied to all sessions in the RDS collection.
You can set RDP session time-outs using user Group Policies. You can do this either in the domain GPO editor (gpmc.msc) or the Local Group Policy Editor (gpedit.msc) on a Remote desktop session or the RDS client.
RDP session timeout settings are found under following GPO sections Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Session Time Limits.
Below are the Remote Desktop time-out settings which are available:
- Set the time limitation for the disconnected sessions
- Set time duration for active but idle Remote Desktop Service sessions -> the policy allows idle RDP sessions to get terminated which has no user inputs (like typing something on the keyboard or moving a mouse)
- Set time duration for active Remote Desktop Service sessions -> it is the maximum time duration of any RDP sessions, after which it gets terminated or gets disconnected after the set time limit.
- End Session when time durations are reached -> sets the time after which an RDP session will be logged off (terminated) instead of disconnecting it.
- Lastly, set a time limitation for the logoff of RemoteApp sessions.
By default, these options are not configured. For example, to automatically terminate disconnected RDP user sessions in 7 hours, You will have to enable Set time limit for the disconnected session policy and select 7 hours from the dropdown list.
At last, save all the changes and update the Group Policy settings on your RD host (gpupdate /force). Now, the new time-out settings will be applied to the latest RDP sessions. Hence, as a result, sessions will only get disconnected after the specified time which is provided by you.
Hopefully, the information above will assist you in resolving the session time-out issue.
---------------
Regards,
Austin_M
dradunsky
Jan 29, 2024Copper Contributor
Austin,
Thanks for that. I used Domain GPO to set the limits and they don't apply. I"ll try using the Collection configuration and see if that helps.
Thanks for that. I used Domain GPO to set the limits and they don't apply. I"ll try using the Collection configuration and see if that helps.