9/17/2020 PSM - How to configure Timeout, idle and Re-connection Settings for Remote Desktop Services and PSM

ction Settings for Remote Desktop Services and PSM Sessions.

Increase Idle session f… Search

Home (/S/) Cases (/S/Case/Case/00B50000008krR0EAI) Knowledge Base Enhancement Requests (/S/Ers) Docs Training (Https://Cyberark-Customers.Force.Com/Idp/Login?App=0sp500000004CP9)

PSM - How to configure Timeout, idle and Re-connection Settings for Remote Desktop Services and PSM Sessions.

Knowledge Article

Article Number
000005058

Title
PSM - How to configure Timeout, idle and Re-connection Settings for Remote Desktop Services and PSM Sessions.

Introduction
How to configure Timeout and Re-connection Settings for Remote Desktop Services and PSM Sessions.

Step-By-Step Instructions
By default, Remote Desktop Services allows users to disconnect from a remote session without logging off and ending the session. When a session is in a disconnected state, running
programs are kept active even though the user is no longer actively connected.
You can limit the amount of time that active, disconnected, and idle (without user input) sessions remain on the server. This is useful because sessions that remain running
indefinitely on the RD Session Host server continue to consume system resources.
Configuring timeout and re connection settings on a per connection basis affects all sessions that use the connection.
You can configure timeout and re-connection settings on a per user basis by using the Remote Desktop Services Extension to the Local Users and Groups snap-in or to the Active
Directory Users and Computers snap-in.
Timeout and re-connection settings configured by using Remote Desktop Session Host Configuration will take precedence over timeout and re-connection settings that have been
configured for a specific user account.
You can configure the following timeout and re-connection settings in Remote Desktop Session Host Configuration.
 
 

Setting Details

Specify the maximum amount of time that a disconnected user session is kept active on the RD Session Host server. If you specify "Never," the
user's disconnected session is maintained for an unlimited time.
End a disconnected session
When a session is in a disconnected state, running programs are kept active even though the user is no longer actively connected. According to PAS
documentation, this value should be set to 1 minute for PSMConnect and PSMAdminConnect users .

Specify the maximum amount of time that the user's Remote Desktop Services session can be active before the session is automatically
disconnected or ended.
Active session limit
The user receives a warning two minutes before the Remote Desktop Services session is disconnected or ended, which allows the user to save open
files and close programs. According to PAS documentation, this value should be set to Never for PSMConnect and PSMAdminConnect users.

Specify the maximum amount of time that an active Remote Desktop Services session can be idle (without user input) before the session is
automatically disconnected or ended.
Idle session limit
The user receives a warning two minutes before the session is disconnected or ended, which allows the user to press a key or move the mouse to
keep the session active.

https://cyberark-customers.force.com/s/article/PSM-How-to-configure-Timeout-idle-and-Re-connection-Settings-for-Remote-Desktop-Services-and-PSM-Sessions 1/3
9/17/2020 PSM - How to configure Timeout, idle and Re-connection Settings for Remote Desktop Services and PSM Sessions.

Specify whether to disconnect or end the user's Remote Desktop Services session when an active session limit or an idle session limit is reached.

When a session limit is If the user's session is disconnected, the programs that the user is running are kept active even though the user is no longer actively connected.
reached or connection is
broken If the user's session is ended, the user will need to establish a new Remote Desktop Services session with an RD Session Host server.

According to PAS documentation, this value should be set to Disconnect from session for PSMConnect and PSMAdminConnect users.

Use the following procedure to specify the timeout and re-connection settings for a remote session.

Membership in the local Administrators group, or equivalent, on the RD Session Host server that you plan to configure, is the minimum required to complete this procedure. Review
details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477 (http://go.microsoft.com/fwlink/?LinkId=83477).

To specify timeout and re-connection settings for a remote session

1. On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative
Tools, point to Remote Desktop Services, and then click Remote Desktop Session Host Configuration.

2. Under Connections, right-click the name of the connection, and then click Properties.

3. In the Properties dialog box for the connection, on the Sessions tab, select the following options as necessary:

Select the Override user settings check box, and then set timeout settings for End a disconnected session, Active session limit, and Idle session limit.
 
Select the Override user settings check box, and then select one of the following re-connection settings: Disconnect from session or End session.
 
4. Click OK. Changes to timeout and re-connection settings are not applied to sessions that are connected when the change is made. The changes will take effect the next time the
user establishes a new connection to the RD Session Host server.

You can also configure timeout and re-connection settings by applying the following Group Policy settings:

Set time limit for disconnected sessions

 
Set time limit for active but idle Remote Desktop Services sessions
 
Set time limit for active Remote Desktop Services sessions
 
Terminate session when time limits are reached
 

These Group Policy settings are located in the following locations:

Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time
Limits
 
User Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits
 

These Group Policy settings can be configured by using either the Local Group Policy Editor or the Group Policy Management Console (GPMC).

Please Note: The GPO path can be in other places in the registry, depending on the PSM server's OS.

Related Versions
8.0;8.1;8.2;8.5;8.6;9.0;9.1;9.2;9.3;9.5;9.6;9.7;9.8;9.9;9.9.5;10.0;10.1;10.2;10.3;10.4;10.5;10.6;10.7;10.8;10.9;10.10;11.1;11;11.2

URL Name
PSM-How-to-configure-Timeout-idle-and-Re-connection-Settings-for-Remote-Desktop-Services-and-PSM-Sessions

Article Record Type

How To

https://cyberark-customers.force.com/s/article/PSM-How-to-configure-Timeout-idle-and-Re-connection-Settings-for-Remote-Desktop-Services-and-PSM-Sessions 2/3
9/17/2020 PSM - How to configure Timeout, idle and Re-connection Settings for Remote Desktop Services and PSM Sessions.

PSM Privileged Session Management (PSM) Core PAS

(/s/topic/0TO50000000N6CLGA0/psm) (/s/topic/0TO50000000N5z5GAC/privi… (/s/topic/0TO50000000N5yzGAC/core…

Was this article helpful? 4

Attachments

Title Last Modified Created By

Flag

Follow

Related Articles

PSM - How to enable PSM reconnection feature. (/s/article/PSM-How-to-enable-PSM-reconnection-feature) 801

PSM - Error: The privileged session could not be established securely. Contact your system administrator (/s/article/PSM-Error-The-privileged-session-could-not-be-established-securely-Contact-your-syste
8.66K
m-administrator)

PSM - Troubleshooting - The connection cannot proceed because authentication is not enabled and the remote computer requir… (/s/article/PSM-Troubleshooting-The-connection-cannot-proceed-because-a
3.22K
uthentication-is-not-enabled-and-the-remote-computer-requires-that-authentication-be-enabled-to-connect)

PSM - Problem to view Windows session: FAILED TO INITIATE WINDOWS SESSION AUDIT (/s/article/PSM-Problem-to-view-Windows-session-FAILED-TO-INITIATE-WINDOWS-SESSION-AUDIT) 7.09K

PSMSC036E No Process was found for image (/s/article/PSMSC036E-No-Process-was-found-for-image) 2.04K

 
 

https://cyberark-customers.force.com/s/article/PSM-How-to-configure-Timeout-idle-and-Re-connection-Settings-for-Remote-Desktop-Services-and-PSM-Sessions 3/3