Re: Automatic log-off for certain accounts



Sure.
You can configure all of the settings in a Group Policy, which you
can filter by user or user group.

User Configuration - Administrative templates - Windows Components
- Terminal Services - Sessions
"Set time limit for disconnected sessions"
"Sets a time limit for active Terminal Services sessions"
"Sets a time limit for active but idle Terminal Services sessions"
"Terminate session when time limits are reached"

From the "Explain" text:
Note that this setting appears in both Computer Configuration and
User Configuration. If both settings are configured, the Computer
Configuration setting overrides.

So create a GPO, link it to the OU which contains the TS account,
configure the GPO to use "loopback processing of user settings" +
session time limits settings mentioned above.
Then filter the security of the GPO, as described here:

816100 - How To Prevent Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows Server 2003
http://support.microsoft.com/?kbid=816100

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"Gonzo" <gonzalo.diethelm@xxxxxxxxx> wrote on 30 mar 2007 in
microsoft.public.windows.terminal_services:

Hello,

Sorry if this is obvious, I am a beginner in Terminal Services.

There is a policy in our servers that logs off sessions
automatically after 30 minutes of inactivity. This applies to
ALL sessions indistinctly. The questions are:

1. Is this configurable anywhere (whether to have this policy or
not, the number of minutes, the accounts it applies to), or is
it a fixed behavior?

2. Is there any way to specify a user or a group of users for
which this setting will NOT apply? We need to have a screen
permanently up and displaying CPU and memory graphs, and would
like this screen not to be logged off automatically.

3. If none of this is possible, is there a known application
that will send a heartbeat to the server, to fool it into
thinking there is activity in the session?

Thanks for any hints and best regards.

Gonzalo
.



Relevant Pages

  • Re: Terminal Services Security Issue with Cached Credentials
    ... I tried the User Configuration setting as well, no luck, previously ... entered credentials could still be used. ... select properties/logon settings - always prompt for password. ... run Terminal Services and connected to multiple servers entering my ...
    (microsoft.public.windows.server.security)
  • RE: Anyone know the SBS Terminal Services session defaults?
    ... Thank you for posting to the SBS Newsgroup. ... you can configure the settings in Terminal Services ... On the right pane, right click RDP-Tcp, go to Properties, Sessions tab. ...
    (microsoft.public.windows.server.sbs)
  • PLEASE HELP: "HKU.Default" settings do not apply themselves to new users
    ... I'm having some problems with the regional settings with my users. ... Terminal Services to share an application program which needs special ... configuration in the date, numbers and time formats. ... correctly configured user, every new user would get the correct settings ...
    (microsoft.public.win2000.general)
  • RE: Session (ID XX) remote control failed. (Error 5 - access is denie
    ... You might want to check the RDP-TCP permissions in the terminal services ... configuration to make sure that you have the ability to shadow/remote control ... sessions. ...
    (microsoft.public.win2000.termserv.clients)
  • Re: appsetting in class doesnt work
    ... an appsettings section. ... <!-- This section defines the logging configuration for ... Dim cnfg As System.Configuration.Configuration ... settings enter in the designer. ...
    (microsoft.public.dotnet.languages.vb)