Solved

Multiple/Single Terminal Sessions Split by Policy?

Posted on 2013-05-29
4
223 Views
Last Modified: 2013-06-05
I have a client that needs to have concurrent RDP sessions enabled for a specific group of people, while restricting the rest of the users to a single session. I have scoured the web and tried  dozens of different group policy configurations, but I just cannot seem to get this to work.

Is this even possible, or is it an all or nothing type of scenario? Any help would be greatly appreciated!
0
Comment
Question by:kjansen1
  • 2
4 Comments
 
LVL 18

Expert Comment

by:Andrew Davis
ID: 39206833
you could create a second RDP listener and put it on a different port, then the users that are allowed multiple connections would need to connect via that port.

I dont think there is any way you could do it with a single listener as this is decided prior to Group policy being applied. The key word here is "think" as i havnt looked it up.

Cheers
Andrew
0
 

Author Comment

by:kjansen1
ID: 39208371
Thanks for the feedback Andrew. I tried doing that, but the setting to allow/deny multiple concurrent sessions by the same user seems to be applied to the terminal server, not the listener port. If I highlight the first listener port and change the option, it also changes it for the second listener port.

Any other ideas?

Ken
0
 
LVL 24

Accepted Solution

by:
Coralon earned 500 total points
ID: 39209711
It is a system level setting.  You can't do this.  

However, you could split your farm up into different groups, and have different settings for different groups of servers.

Coralon
0
 

Author Closing Comment

by:kjansen1
ID: 39223194
Thanks Coralon - I ended up setting up RD Gateway and deploying a second server. Not really what I wanted to do, but it looks like I have no choice. Got everything configured and it works good.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

806 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question