Solved

How do I stop session time out for terminal services

Posted on 2008-10-05
4
2,002 Views
Last Modified: 2013-11-21
I run a terminal services app on windows 2003 server and XP clients which uses a local user account to log on to windows on the computer. Then the app is launched by clicking on an icon which has the needed credentials on the domain to access required resources.
 My problem is after a period of in activity the terminal session locks similarly to locking your windows desktop session and hence the user needs to know the domain account password to unlock the session. This defeats the purpose. How can I stop this time out issue or extend the time it takes. I went over the GP and have made several setting changes but none seem to address the issue. Thanks for any help you can offer
0
Comment
Question by:dutyfreecaribbean
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 54

Expert Comment

by:McKnife
ID: 22645246
The policy to be modified is the screen saver setting at the TS. "on resume, display logon screen" is activated. You could take out that setting completely or rise the screen saver activation time.
0
 
LVL 4

Expert Comment

by:placebo69a
ID: 22645761
McKnife hit it spot on mate. What's causing the timeout is the Screen Saver setting. It's probably set to the default which means after 10 minutes of inactivity the Screen Saver pops up and locks the session out.
If you made changes to the Screen Saver settings using a GPO you will need to adjust the settings in that gpo. If you haven't made any settings you can simply use the Local Security Policy editor in the Administrative Tools on the server. Look under Local Computer Policy\User Configuration\Administrative Templates\Control Panel\Display for the following settings:
Hide screen saver tab - Removes Screen Saver tab from Display in Control Panel. This way users won't be able to change your settings.
No screen saver - Enable to prevent any screen savers from running.You could switch this on and forget about the following setting. If you don't you want to set this next one:
Password protect the screen saver -Disable to prevent passwords from being used on all screen savers. And an end to your worries.

You should consider the following: Without a Screen Saver with password protection enabled any terminal services session is compromised if someone obtains access to the computer running it. If your visitor security is lax or the intended application is sensitive this is a potential security risk.

Let me know if this helps. :)



0
 

Author Comment

by:dutyfreecaribbean
ID: 22687704
I tried adjusting the setting on the database server, including out right  disabling the screen saver and still having the same issue where the credentials are being required to unlock the session
0
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 22908570
Please check the value of the following regkey:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/regentry/93258.mspx?mfr=true
Has to be zero.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question