Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

i want to change the local computer policy in a windows 2003 terminal server which is part of domain.

The policy i want to change is "Sets a time limit for active Terminal services session" to Enabled and Active Sessions limit to 5 minutes, so that all active session can be terminated after time limit.

However, I don't want to enforce it on "domain\Domain Admin" who are part of local group Administrators as well local admin users of the server. Mostly I would like to enforce this policy on Domain\domain users who are member of Remote Desktop Users of this terminal server.

can somebody please help .

Thanks

share|improve this question

1 Answer 1

up vote 1 down vote accepted

The terminal server time outs are a per-machine setting. There is no way you are going to be able to have a per-computer setting behave differently per user.

You can set per-user session limits via policy, but you cannot use a local policy. You'll have to setup a policy on your domain place it in an OU with your terminal server, set up loop-back processing, and set the per-user session limits. See (User Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Session Time Limits)

Refs:

share|improve this answer
    
Thanks Zoerdache..it worked. I did a reboot of terminal server after applying the policy in separate OU in AD. –  Kabir Rao Mar 12 '10 at 9:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.