Microsoft KB Archive/294751

= Terminal Services Group Policy Objects =

Article ID: 294751

Article Last Modified on 1/25/2006

-

APPLIES TO


 * Microsoft Windows XP Professional
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)

-



This article was previously published under Q294751





SUMMARY
This article discusses Group Policy objects that are related to Terminal Services.



MORE INFORMATION
By using the Microsoft Management Console (MMC) and the Group Policy snap-in, many server-side settings related to Terminal Services can be set and changed in the following folder locations:
 * Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services
 * Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services folder, the following settings can be made:
 * Limit users to one remote session
 * Allow screensaver
 * Limit number of connections
 * Limit maximum color depth
 * Do not allow new client connections
 * Do not allow local administrators to customize permissions
 * Remove windows security item from Start menu
 * Remove disconnect item from Shut Down dialog
 * Set path for Terminal Services (TS) roaming profiles
 * TS user home directory
 * Remote control settings
 * Start a program on connection

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Client\Server data redirection folder, the following settings can be made:
 * Do not allow clipboard redirection
 * Allow audio redirection
 * Do not allow COM port redirection
 * Do not allow client printer redirection
 * Do not allow LPT port redirection
 * Do not allow drive redirection
 * Do not set default client printer to be default printer in a session

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Encryption and Security folder, the following settings can be made:
 * Always prompt client for password upon connection
 * Set client connection encryption level

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Temporary Folders folder, the following settings can be made:
 * Do not use temp folders per session
 * Do not delete temp folders upon exit

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Session Directory folder, the following settings can be made:


 * Session Directory active
 * Session Directory Server
 * Session Directory Cluster name

Under the Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions folder, the following settings can be made:
 * Set time limit for disconnected sessions
 * Set time limit for active sessions
 * Set time limit for idle sessions
 * Allow connection from original client only
 * Terminate session when time limits are reached

Under the Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services folder, the following settings can be made:
 * Start a program on connection
 * Remote control settings

Under the Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Terminal Services\Sessions folder, the following settings can be made:
 * Set time limit for disconnected sessions
 * Set time limit for active sessions
 * Set time limit for idle sessions
 * Allow connection from original client only
 * Terminate session when time limits are reached

To find out what each of these settings does, open the MMC and Group Policy object as outlined in the following steps, select the item that you want to learn about, and then click the extended tab in the lower left of the right pane of the MMC.

To access the Group Policy MMC snap-in:
 * 1) Click Start.
 * 2) Click Run, type: MMC, and then press ENTER.
 * 3) Click File, and then click Add/Remove Snap-in.
 * 4) On the Standalone tab, click Add, and then click Group Policy.
 * 5) Click Add, and then click Finish.
 * 6) Click Close, and then click OK. Local Computer Policy is located under the console root.

Keywords: kbinfo kbnetwork KB294751

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.