Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i want to change the local computer policy in a windows 2003 terminal server which is part of domain.

The policy i want to change is "Sets a time limit for active Terminal services session" to Enabled and Active Sessions limit to 5 minutes, so that all active session can be terminated after time limit.

However, I don't want to enforce it on "domain\Domain Admin" who are part of local group Administrators as well local admin users of the server. Mostly I would like to enforce this policy on Domain\domain users who are member of Remote Desktop Users of this terminal server.

can somebody please help .


share|improve this question
up vote 1 down vote accepted

The terminal server time outs are a per-machine setting. There is no way you are going to be able to have a per-computer setting behave differently per user.

You can set per-user session limits via policy, but you cannot use a local policy. You'll have to setup a policy on your domain place it in an OU with your terminal server, set up loop-back processing, and set the per-user session limits. See (User Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Session Time Limits)


share|improve this answer
Thanks worked. I did a reboot of terminal server after applying the policy in separate OU in AD. – Kabir Rao Mar 12 '10 at 9:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.