Tag: User Configuration
Set RD Gateway server address
Specifies the address of the RD Gateway server that clients must use when attempting to connect to an RD Session Host server. You can enforce this policy setting or you can allow users to overwrite this policy setting. By default when you enable this policy setting it is enforced. When this policy setting is enforced users cannot override this setting even if they select the “Use these RD Gateway server settings” option on the client. Note: It is highly recommended that you also specify the authentication method by using the “Set RD Gateway authentication method” policy setting. If you do not specify an authentication method by using this setting either the NTLM protocol that is enabled on the client or a smart card can be used. To allow users to overwrite the “Set RD Gateway server address” policy setting and connect to another RD Gateway server you must select the “Allow users to change this setting” check box and users will be allowed to specify an alternate RD Gateway server. Users can specify an alternative RD Gateway server by configuring settings on the client using an RDP file or using an HTML script. If users do not specify an alternate RD Gateway server the server that you specify in this policy setting is used by default. Note: If you disable or do not configure this policy setting but enable the “Enable connections through RD Gateway” policy setting client connection attempts to any remote computer will fail if the client cannot connect directly to the remote computer. If an RD Gateway server is specified by the user a client connection attempt will be made through that RD Gateway server.
Redirect only the default client printer
This policy setting allows you to specify whether the default client printer is the only printer redirected in Remote Desktop Services sessions. If you enable this policy setting only the default client printer is redirected in Remote Desktop Services sessions. If you disable or do not configure this policy setting all client printers are redirected in Remote Desktop Services sessions.
Set time limit for logoff of RemoteApp sessions
This policy setting allows you to specify how long a user’s RemoteApp session will remain in a disconnected state after closing all RemoteApp programs before the session is logged off from the RD Session Host server. By default if a user closes a RemoteApp program the session is disconnected from the RD Session Host server but it is not logged off. If you enable this policy setting when a user closes the last running RemoteApp program associated with a session the RemoteApp session will remain in a disconnected state until the time limit that you specify is reached. When the time limit specified is reached the RemoteApp session will be logged off from the RD Session Host server. If the user starts a RemoteApp program before the time limit is reached the user will reconnect to the disconnected session on the RD Session Host server. If you disable or do not configure this policy setting when a user closes the last RemoteApp program the session will be disconnected from the RD Session Host server but it is not logged off. Note: This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured the Computer Configuration policy setting takes precedence.
Always show desktop on connection
This policy setting allows you to specify whether the desktop is always displayed after a client connects to a remote computer or whether an initial program can run. It can require that the desktop be displayed after a client connects to a remote computer even if an initial program is already specified in the default user profile Remote Desktop Connection or through Group Policy. If you enable this policy setting the desktop is always displayed when a client connects to a remote computer. This policy setting overrides any initial program policy settings. If you disable or do not configure this policy setting an initial program can be specified that runs on the remote computer after the client connects to the remote computer. If an initial program is not specified the desktop is always displayed on the remote computer after the client connects to the remote computer. Note: If this policy setting is enabled then the “Start a program on connection” policy setting is ignored.
Allow time zone redirection
This policy setting allows you to specify whether the client computer redirects its time zone settings to the Remote Desktop Services session. If you enable this policy setting clients that are capable of time zone redirection send their time zone information to the server. The server base time is then used to calculate the current session time (current session time = server base time + client time zone). If you disable or do not configure this policy setting the client computer does not redirect its time zone information and the session time zone is the same as the server time zone. Note: Time zone redirection is possible only when connecting to at least a Microsoft Windows Server 2003 terminal server with a client using RDP 5. 1 or later.
Do not allow Clipboard redirection
This policy setting specifies whether to prevent the sharing of Clipboard contents (Clipboard redirection) between a remote computer and a client computer during a Remote Desktop Services session. You can use this setting to prevent users from redirecting Clipboard data to and from the remote computer and the local computer. By default Remote Desktop Services allows Clipboard redirection. If you enable this policy setting users cannot redirect Clipboard data. If you disable this policy setting Remote Desktop Services always allows Clipboard redirection. If you do not configure this policy setting Clipboard redirection is not specified at the Group Policy level.
Remove remote desktop wallpaper
This policy setting allows you to specify whether desktop wallpaper is displayed to clients when they are connected to a remote server using RDP. You can use this setting to enforce the removal of wallpaper during a Remote Desktop Services session. If you enable this policy setting wallpaper is not displayed in a Remote Desktop Services session. If you disable this policy setting wallpaper is displayed in a Remote Desktop Services session depending on the client configuration. If you do not configure this policy setting Windows Vista displays wallpaper to remote clients connecting through Remote Desktop depending on the client configuration (see the Experience tab in the Remote Desktop Connection options for more information). Servers running Windows Server 2008 do not display wallpaper by default to Remote Desktop Services sessions.
Hide Property Pages
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview. This setting prevents users from viewing and changing characteristics such as the program the task runs its schedule details idle time and power management settings and its security context. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration. Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks use the “Remove Advanced Menu” setting.
Prohibit New Task Creation
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also the system does not respond when users try to move paste or drag programs or documents into the Scheduled Tasks folder. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration. Important: This setting does not prevent administrators of a computer from using At. exe to create new tasks or prevent administrators from submitting tasks from remote computers.
Prohibit Task Deletion
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks folder and from the menu that appears when you right-click a task. Also the system does not respond when users try to cut or drag a task from the Scheduled Tasks folder. Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured the setting in Computer Configuration takes precedence over the setting in User Configuration. Important: This setting does not prevent administrators of a computer from using At. exe to delete tasks.