Скачать или смотреть How to Set a Remote Desktop Logoff Delay Period Using Group Policy in Active Directory

Learn how to configure the Remote Desktop logoff delay period in Active Directory using Group Policy Management. This guide covers step-by-step instructions and helpful tips for Windows server environments.
---
This video is based on the question https://stackoverflow.com/q/62110475/ asked by the user 'Marc George' ( https://stackoverflow.com/u/3360236/ ) and on the answer https://stackoverflow.com/a/62329442/ provided by the user 'Lester Lynch' ( https://stackoverflow.com/u/11810719/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: How to Set a AD Computer Group Policy for Remote Desktop Logoff Delay Period?

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/l...
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
How to Set a Remote Desktop Logoff Delay Period Using Group Policy in Active Directory

Managing Active Directory (AD) effectively is crucial for ensuring a secure and efficient IT environment. One common issue encountered by system administrators is controlling the behavior of Remote Desktop sessions, particularly when a user disconnects. In this post, we will address how to set a Remote Desktop logoff delay period for disconnected users using Group Policy. This can be especially useful in preventing unused sessions from remaining active indefinitely, helping to optimize server resources and enhance security.

Understanding the Problem

In an Active Directory environment, when a user disconnects from a Remote Desktop session, their session remains active for a certain period of time. If this delay period is not configured, users may leave sessions open unintentionally, leading to unnecessary resource consumption. As an administrator, it's important to be able to set a policy that automatically logs off users after a specific duration of inactivity.

Steps to Configure Remote Desktop Logoff Delay Period

To set up this configuration, you will be utilizing the Group Policy Management tool. Below are the steps you need to follow:

Step 1: Open Group Policy Management

Access the Management Tool: On your server, click on Start, type in gpmc.msc, and press Enter. This action opens the Group Policy Management Console.

Select the Appropriate Domain or Organizational Unit (OU): In the left pane, navigate to the domain or OU where you want to apply the policy.

Step 2: Create or Edit a Group Policy Object (GPO)

Right-click the Desired Location: Right-click the domain or OU and choose Create a GPO in this domain, and Link it here.

Name the GPO: Enter a descriptive name for your policy, such as "Remote Desktop Logoff Policy".

Edit the GPO: Right-click on your new GPO and select Edit.

Step 3: Configure the Logoff Delay Policy

Navigate to User Configuration: In the Group Policy Management Editor, expand the User Configuration node.

Expand Administrative Templates: Navigate to Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Session Time Limits.

Configure Policies: Look for the following settings under Session Time Limits:

Set time limit for disconnected sessions

End session when time limits are reached

Edit the Desired Policy: Double-click on "Set time limit for disconnected sessions". Set it to Enabled and specify the desired delay period in the time limit box (for example, 10 minutes, 30 minutes, etc.).

Step 4: Finalize and Apply the GPO

Save Changes: Click OK to apply the settings and close the editor.

Link the GPO: Make sure your GPO is linked to the appropriate OU or domain where the target computers reside.

Force Group Policy Update: On client machines, you can either wait for the next Group Policy refresh or manually run gpupdate /force in the command prompt.

Important Tips

Load the Admin Templates: Ensure that you've loaded the Admin templates (.admx files) for the specific versions of Windows Server that you are using. This access can help you use newer options in the policy settings.

Testing: Always test the new policy with a few users before rolling it out organization-wide to avoid disruption.

Documentation: Keep a log of the applied policies and their outcomes to assess the effectiveness and to make adjustments when necessary.

Conclusion

Configuring a Remote Desktop logoff delay period is an essential task for maintaining good server hygiene and performance. By using Group Policy Management effectively