Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 588
  • Last Modified:

How can I extend automatic log out times for Terminal Services in Windows Server 2008?

Hi,

I am running a SBS server 2008 and a Windows Server Standard 2008. The SBS server 2008 is the Domain Controller and the Server Standard is the Terminal Server. I am running a mixture of desktop computers and Thin client machines to log into the Terminal Server using terminal services. I am trying to find a way to extend the Auto logging out of the machines so that the Staff does not have to keep logging in every half hour or so. Most staff have their own desks so there is not different users on the machines, just one user per machine. How can I extend the logout times to say about an hour or two??

Thanks
Paul
0
Darkner007
Asked:
Darkner007
  • 3
  • 3
  • 2
1 Solution
 
mwiener1Commented:
create a new GPO and link it to the terminal server.

Look through computer configuration - admin templates - windows components - remote desktop services - remote desktop session host. I believe you'l;l find the settings you need there.

Specifically the active session idle timeout setting.
0
 
Darkner007Author Commented:
Are they on the Terminal Server? Is that stuff under Administrative Tools?

Thanks
0
 
mwiener1Commented:
on the terminal server itself - you can run gpedit.msc

from the domain controller, its under admin tools - group policy management,
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
Darkner007Author Commented:
I have checked under User properties and from there gone to the tab Sessions and it has session limits there but they are listed as Never to time out. Is there anywhere else that this is controlled by?
0
 
AcklesCommented:
Do as following:
Create an OU, call it TS (for Terminal Server), move your Server 2008 Standard in it (Drag the computer in it)
Then create a GPO in the TS OU, name it Logout or whatever makes sense to you better.

Edit the GPO & enable this setting on it:

http://technet.microsoft.com/en-us/library/cc753112(WS.10).aspx

Now, please note that in the document it states that you can do it on both Computer & User. If you do it on User node then you will have to enable Loopback to make if effect. However the simplest way would be to enable on Computer side.

The problem is that you are having Server 2008 & the first post is referring to Server 2008 R2. I think that is where you are getting confused.

Please let us know if you need further assistance?

A
0
 
AcklesCommented:
Sorry forgot to mention, once you have enabled the policy please make sure to RESTART your Terminal Server, as since you would be moving the machine in different OU, computers don't generally give desired result unless you reboot them.
Don't rely on gpupdate /force, just give it a Reboot to be sure.

A
0
 
Darkner007Author Commented:
How do you create OU?? I take that to mean Organisational Unit??

Thanks
0
 
AcklesCommented:
Right Click in Active Directory > New > Organisational > Unit
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now