Tag: Computer Configuration
Specify RD Session Host server fallback printer driver behavior
This policy setting allows you to specify the RD Session Host server fallback printer driver behavior. By default the RD Session Host server fallback printer driver is disabled. If the RD Session Host server does not have a printer driver that matches the client’s printer no printer will be available for the Remote Desktop Services session. If you enable this policy setting the fallback printer driver is enabled and the default behavior is for the RD Session Host server to find a suitable printer driver. If one is not found the client’s printer is not available. You can choose to change this default behavior. The available options are:”Do nothing if one is not found” – If there is a printer driver mismatch the server will attempt to find a suitable driver. If one is not found the client’s printer is not available. This is the default behavior. “Default to PCL if one is not found” – If no suitable printer driver can be found default to the Printer Control Language (PCL) fallback printer driver. “Default to PS if one is not found” – If no suitable printer driver can be found default to the PostScript (PS) fallback printer driver. “Show both PCL and PS if one is not found” – If no suitable driver can be found show both PS and PCL-based fallback printer drivers. If you disable this policy setting the RD Session Host server fallback driver is disabled and the RD Session Host server will not attempt to use the fallback printer driver. If you do not configure this policy setting the fallback printer driver behavior is off by default. Note: If the “Do not allow client printer redirection” setting is enabled this policy setting is ignored and the fallback printer driver is disabled.
Allow audio and video playback redirection
This policy setting allows you to specify whether users can redirect the remote computer’s audio and video output in a Remote Desktop Services session. Users can specify where to play the remote computer’s audio output by configuring the remote audio settings on the Local Resources tab in Remote Desktop Connection (RDC). Users can choose to play the remote audio on the remote computer or on the local computer. Users can also choose to not play the audio. Video playback can be configured by using the videoplayback setting in a Remote Desktop Protocol (. rdp) file. By default video playback is enabled. By default audio and video playback redirection is not allowed when connecting to a computer running Windows Server 2008 R2 Windows Server 2008 or Windows Server 2003. Audio and video playback redirection is allowed by default when connecting to a computer running Windows 8 Windows Server 2012 R2 Windows 7 Windows Vista or Windows XP Professional. If you enable this policy setting audio and video playback redirection is allowed. If you disable this policy setting audio and video playback redirection is not allowed even if audio playback redirection is specified in RDC or video playback is specified in the . rdp file. If you do not configure this policy setting audio and video playback redirection is not specified at the Group Policy level.
Limit audio playback quality
This policy setting allows you to limit the audio playback quality for a Remote Desktop Services session. Limiting the quality of audio playback can improve connection performance particularly over slow links. If you enable this policy setting you must select one of the following: High Medium or Dynamic. If you select High the audio will be sent without any compression and with minimum latency. This requires a large amount of bandwidth. If you select Medium the audio will be sent with some compression and with minimum latency as determined by the codec that is being used. If you select Dynamic the audio will be sent with a level of compression that is determined by the bandwidth of the remote connection. The audio playback quality that you specify on the remote computer by using this policy setting is the maximum quality that can be used for a Remote Desktop Services session regardless of the audio playback quality configured on the client computer. For example if the audio playback quality configured on the client computer is higher than the audio playback quality configured on the remote computer the lower level of audio playback quality will be used. Audio playback quality can be configured on the client computer by using the audioqualitymode setting in a Remote Desktop Protocol (. rdp) file. By default audio playback quality is set to Dynamic. If you disable or do not configure this policy setting audio playback quality will be set to Dynamic.
Allow audio recording redirection
This policy setting allows you to specify whether users can record audio to the remote computer in a Remote Desktop Services session. Users can specify whether to record audio to the remote computer by configuring the remote audio settings on the Local Resources tab in Remote Desktop Connection (RDC). Users can record audio by using an audio input device on the local computer such as a built-in microphone. By default audio recording redirection is not allowed when connecting to a computer running Windows Server 2008 R2. Audio recording redirection is allowed by default when connecting to a computer running at least Windows 7 or Windows Server 2008 R2. If you enable this policy setting audio recording redirection is allowed. If you disable this policy setting audio recording redirection is not allowed even if audio recording redirection is specified in RDC. If you do not configure this policy setting Audio recording redirection is not specified at the Group Policy level.
Do not allow Clipboard redirection
This policy setting specifies whether to prevent the sharing of Clipboard contents (Clipboard redirection) between a remote computer and a client computer during a Remote Desktop Services session. You can use this setting to prevent users from redirecting Clipboard data to and from the remote computer and the local computer. By default Remote Desktop Services allows Clipboard redirection. If you enable this policy setting users cannot redirect Clipboard data. If you disable this policy setting Remote Desktop Services always allows Clipboard redirection. If you do not configure this policy setting Clipboard redirection is not specified at the Group Policy level.
Do not allow COM port redirection
This policy setting specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Remote Desktop Services session. You can use this setting to prevent users from redirecting data to COM port peripherals or mapping local COM ports while they are logged on to a Remote Desktop Services session. By default Remote Desktop Services allows this COM port redirection. If you enable this policy setting users cannot redirect server data to the local COM port. If you disable this policy setting Remote Desktop Services always allows COM port redirection. If you do not configure this policy setting COM port redirection is not specified at the Group Policy level.
Set path for Remote Desktop Services Roaming User Profile
This policy setting allows you to specify the network path that Remote Desktop Services uses for roaming user profiles. By default Remote Desktop Services stores all user profiles locally on the RD Session Host server. You can use this policy setting to specify a network share where user profiles can be centrally stored allowing a user to access the same profile for sessions on all RD Session Host servers that are configured to use the network share for user profiles. If you enable this policy setting Remote Desktop Services uses the specified path as the root directory for all user profiles. The profiles are contained in subfolders named for the account name of each user. To configure this policy setting type the path to the network share in the form of -> -> Computername -> Sharename. Do not specify a placeholder for the user account name because Remote Desktop Services automatically adds this when the user logs on and the profile is created. If the specified network share does not exist Remote Desktop Services displays an error message on the RD Session Host server and will store the user profiles locally on the RD Session Host server. If you disable or do not configure this policy setting user profiles are stored locally on the RD Session Host server. You can configure a user’s profile path on the Remote Desktop Services Profile tab on the user’s account Properties dialog box. Notes:1. The roaming user profiles enabled by the policy setting apply only to Remote Desktop Services connections. A user might also have a Windows roaming user profile configured. The Remote Desktop Services roaming user profile always takes precedence in a Remote Desktop Services session. 2. To configure a mandatory Remote Desktop Services roaming user profile for all users connecting remotely to the RD Session Host server use this policy setting together with the “Use mandatory profiles on the RD Session Host server” policy setting located in Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> RD Session Host -> Profiles. The path set in the “Set path for Remote Desktop Services Roaming User Profile” policy setting should contain the mandatory profile.
Use mandatory profiles on the RD Session Host server
This policy setting allows you to specify whether Remote Desktop Services uses a mandatory profile for all users connecting remotely to the RD Session Host server. If you enable this policy setting Remote Desktop Services uses the path specified in the “Set path for Remote Desktop Services Roaming User Profile” policy setting as the root folder for the mandatory user profile. All users connecting remotely to the RD Session Host server use the same user profile. If you disable or do not configure this policy setting mandatory user profiles are not used by users connecting remotely to the RD Session Host server. Note:For this policy setting to take effect you must also enable and configure the “Set path for Remote Desktop Services Roaming User Profile” policy setting.
Limit the size of the entire roaming user profile cache
This policy setting allows you to limit the size of the entire roaming user profile cache on the local drive. This policy setting only applies to a computer on which the Remote Desktop Session Host role service is installed. Note: If you want to limit the size of an individual user profile use the “Limit profile size” policy setting located in User Configuration -> Policies -> Administrative Templates -> System -> User Profiles. If you enable this policy setting you must specify a monitoring interval (in minutes) and a maximum size (in gigabytes) for the entire roaming user profile cache. The monitoring interval determines how often the size of the entire roaming user profile cache is checked. When the size of the entire roaming user profile cache exceeds the maximum size that you have specified the oldest (least recently used) roaming user profiles will be deleted until the size of the entire roaming user profile cache is less than the maximum size specified. If you disable or do not configure this policy setting no restriction is placed on the size of the entire roaming user profile cache on the local drive. Note: This policy setting is ignored if the “Prevent Roaming Profile changes from propagating to the server” policy setting located in Computer Configuration -> Policies -> Administrative Templates -> System -> User Profiles is enabled.
License server security group
This policy setting allows you to specify the RD Session Host servers to which a Remote Desktop license server will offer Remote Desktop Services client access licenses (RDS CALs). You can use this policy setting to control which RD Session Host servers are issued RDS CALs by the Remote Desktop license server. By default a license server issues an RDS CAL to any RD Session Host server that requests one. If you enable this policy setting and this policy setting is applied to a Remote Desktop license server the license server will only respond to RDS CAL requests from RD Session Host servers whose computer accounts are a member of the RDS Endpoint Servers group on the license server. By default the RDS Endpoint Servers group is empty. If you disable or do not configure this policy setting the Remote Desktop license server issues an RDS CAL to any RD Session Host server that requests one. The RDS Endpoint Servers group is not deleted or changed in any way by disabling or not configuring this policy setting. Note: You should only enable this policy setting when the license server is a member of a domain. You can only add computer accounts for RD Session Host servers to the RDS Endpoint Servers group when the license server is a member of a domain.