Terminal Services timeouts not applying / applying incorrectly

Posted on 2010-01-07
Last Modified: 2013-11-21
We have a Microsoft Windows 2003 R2 terminal server with Citrix installed.   The clients that connect to this server have various idle timeout requirements so we have set appropriate session idle timeouts on each account, but these timeouts are not applying properly.

To test I have created an account with a 5 minute idle timeout.   If I leave the account logged in and watch it from Terminal Services Manager, I see the session go idle and the timeout comes and goes.  It stays connected for 60 minutes, then finally goes to a disconnected state.

I've checked local policy, resultant set of policy, the RDP and ICA listeners in Terminal Services Configuration MMC, and the MaxIdleTime values for the listeners in the registry.  None of them appear to indicate that a timeout has been defined.  Where could this 60 minute timeout coming from?

Question by:mmarechal
    LVL 14

    Expert Comment

    Where are you setting the individual users timeout session at?  In their AD profile?

    If you have citrix servers often they have their own group policy (a loopback policy, see here if you don't know if you are using them:

    If in the loopback policy in the Processing mode properties, if 'Replace' is used then it will not inherit any user settings from AD.  If 'Merge' is used then I am not 100% sure if those setting will come over or not, but that may solve it.

    Not sure if that is your issue but that would be where I would start.

    Author Comment

    Thanks for your reply.  Yes, we're trying to set the session timeouts in the AD profile.

    Group Policy loopback processing mode is currently Not Configured in local policy, and we don't have it set in any other group policies.   All of the policies we do have are applied to the user OU's (these users only logon through Citrix)

    At the moment I've also placed my test user in an OU which has all group policies blocked just in case.

    One new bit of information - I found that if I change the timeout on the AD profile of my test user from 5 mintues to Never, it doesn't seem to disconnect after 60 minutes.
    LVL 12

    Expert Comment

    by:Daniel Borger
    Have you tested using RDP? Some of the terminal services group policies do not apply perfectly to ICa connections.

    Accepted Solution

    Yes, I'm testing using RDP and ICA, same results at the moment.

    I've opened a ticket with Microsoft and they've pointed me to this article/hotfix:

    We have Windows 2008 domain controllers and apparently the timeout values are stored differently in 2008 versus 2003.  Going to install this and see what happens.

    Author Comment

    Just applied the hotfix to all our domain controllers this past weekend.  It looks like that did the trick.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    After several days of searching and hunting for limited documentation, I wanted to share this guide to hopefully save someone the hassle of trying to figure this out on their own. I have tested this on Xendesktop 7.1 and PS 4.5 running simultaneous…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now