Windows Server 2008 and Windows Vista : Preferences (part 1) - Terminal Services

12/5/2013 2:09:16 AM

1. Terminal Services

Many areas of Terminal Services can be configured using Group Policy. As Terminal Services has grown into a useful and powerful solution for many companies, so have the number of settings that are available in a GPO. Some settings target the computer, which affects all users who log on to that computer. Other settings target users, providing granular and flexible control over how each user connects to and uses Terminal Services. Table 1 summarizes the majority of the Terminal Services settings that you will find in a GPO.

Table 1. Terminal Services Settings
Full Policy Name	Computer or User
Allow audio redirection	Computer
Allow remote start of unlisted programs	Computer
Redirect only the default client printer	Computer
Use Terminal Services Easy Print driver first	Computer
Use TS Session Broker Load Balancing	Computer
Allow .rdp files from unknown publishers	Computer
Allow .rdp files from valid publishers and user’s default .rdp settings	Computer
Configure server authentication for client	Computer
Do not allow passwords to be saved	Computer
Prompt for credentials on the client computer	Computer
Specify SHA1 thumbprints of certificates representing trusted .rdp publishers	Computer
Allow users to connect remotely using Terminal Services	Computer
Automatic reconnection	Computer
Configure keep-alive connection interval	Computer
Deny logoff of an administrator logged in to the console session	Computer
Limit number of connections	Computer
Restrict Terminal Services users to a single remote session	Computer
Set rules for remote control of Terminal Services user sessions	Computer
Allow time zone redirection	Computer
Do not allow clipboard redirection	Computer
Do not allow COM port redirection	Computer
Do not allow drive redirection	Computer
Do not allow LPT port redirection	Computer
Do not allow smart card device redirection	Computer
Do not allow supported Plug and Play device redirection	Computer
Hide notifications about TS Licensing problems that affect the terminal server	Computer
Set the Terminal Services licensing mode	Computer
Use the specified Terminal Services license servers	Computer
Do not allow client printer redirection	Computer
Do not set default client printer to be default printer in a session	Computer
Specify terminal server fallback printer driver behavior	Computer
Set path for TS Roaming Profiles	Computer
Set TS User Home Directory	Computer
Use mandatory profiles on the terminal server	Computer
Always show desktop on connection	Computer
Enforce Removal of Remote Desktop Wallpaper	Computer
Limit maximum color depth	Computer
Remove “Disconnect” option from Shut Down dialog	Computer
Remove Windows Security item from Start menu	Computer
Start a program on connection	Computer
Always prompt for password upon connection	Computer
Do not allow local administrators to customize permissions	Computer
Require secure RPC communication	Computer
Require use of specific security layer for remote (RDP) connections	Computer
Require user authentication for remote connections by using Network Level Authentication	Computer
Server Authentication Certificate Template	Computer
Set client connection encryption level	Computer
Set time limit for active but idle Terminal Services sessions	Computer
Set time limit for active Terminal Services sessions	Computer
Set time limit for disconnected sessions	Computer
Set time limit for logoff of RemoteApp sessions	Computer
Terminate session when time limits are reached	Computer
Do not delete temp folder upon exit	Computer
Do not use temporary folders per session	Computer
Join TS Session Broker	Computer
Configure TS Session Broker farm name	Computer
Configure TS Session Broker server name	Computer
Use IP Address Redirection	Computer
License server security group	Computer
Prevent license upgrade	Computer
Allow admin to install from Terminal Services session	Computer
Allow log on through Terminal Services	Computer
Redirect only the default client printer	User
Use Terminal Services Easy Print driver first	User
Allow time zone redirection	User
Do not allow clipboard redirection	User
Always show desktop on connection	User
Start a program on connection	User
Remove remote desktop wallpaper	User
Allow .rdp files from unknown publishers	User
Allow .rdp files from valid publishers and user’s default .rdp settings	User
Do not allow passwords to be saved	User
Specify SHA1 thumbprints of certificates representing trusted .rdp publishers	User
Set rules for remote control of Terminal Services user sessions	User
Start a program on connection	User
Set time limit for active but idle Terminal Services sessions	User
Set time limit for active Terminal Services sessions	User
Set time limit for disconnected sessions	User
Terminate session when time limits are reached	User
Enable connection through TS Gateway	User
Set TS Gateway authentication method	User
Set TS Gateway server address	User

More Info

Table 1 summarizes the majority of the Terminal Services settings that can be configured in a GPO. The policy name is listed in the table. If you are having trouble finding the policy within the Group Policy Management Editor (GPME), you can download and refer to spreadsheet, WindowsServerGroupPolicySettings.xls, from the Microsoft Download Center at http://www.microsoft.com/Downloads/.

Others

- Sharepoint 2013 : Automating tasks with workflows - Switching to the visual designer, Creating workflows in Visio 2013

- Sharepoint 2013 : Automating tasks with workflows - Introducing Microsoft Visio integration with SharePoint workflows - Visio visual designer

- Sharepoint 2013 : Automating tasks with workflows - Editing workflows - Edit an existing list workflow

- Sharepoint 2013 : Creating a list workflow in SharePoint Designer

- Microsoft Access 2010 : Publishing Your Database to Access Services

- Microsoft Access 2010 : Creating Publishable Objects (part 4) - Creating Server Reports

- Microsoft Access 2010 : Creating Publishable Objects (part 3) - Creating Server Forms

- Microsoft Access 2010 : Creating Publishable Objects (part 2) - Creating Server Queries

- Microsoft Access 2010 : Creating Publishable Objects (part 1) - Working with Application Parts

- Microsoft Access 2010 : Working with Web Databases - Creating a Blank Web Database

Windows Server 2008 and Windows Vista : Preferences (part 1) - Terminal Services

1. Terminal Services

Table 1. Terminal Services Settings