Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Several of our admins have a bad habit of closing but not logging off from, their remote desktop sessions to multiple servers. We would like to setup a GPO that will automatically log off RDP sessions that have been idle for longer than X.

What I am trying to figure out, is to what I would link the GPO to. Would I link it to the OU which contains the servers, or do I link it to the accounts of the admins themselves?

share|improve this question
Also discussed on SuperUser: – user82769 Feb 21 '15 at 14:57
up vote 3 down vote accepted

You can set it in either Computer Configuration or User Configuration and you should set it based on whether you want to target the user (setting applied to any server where the specific user has an RDP session) or to the computer (setting applied to specific server where any user has an RDP session).

If you set it in Computer Configuration then you should link the GPO to the OU where the computer objects reside.

If you set it in User Configuration then you should link the GPO to the OU where the user objects reside.

If you link it to both the Computers and the users OU then the Computer Configuration settings take precedence over the User Configuration settings.

share|improve this answer
Thank you very much! – Citizen Chin Aug 16 '11 at 15:03
Glad to help... – joeqwerty Aug 16 '11 at 15:05

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.