Modifying the Group Policy

Local Group Policy Editor

Open the Run box and enter gpedit.msc to open Local Group Policy Editor.

Using the Specified Remote Desktop License Servers

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Use the specified Remote Desktop license servers.
  2. In the displayed window, select the Enabled option.
  3. Click OK.

Hiding Notifications About RD Licensing Problems that Affect the RD Session Host Server

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Hide notifications about RD Licensing problems that affect the RD Session Host Server.
  2. In the displayed window, select the Enabled option.
  3. Click OK.

Setting the Remote Desktop Licensing Mode

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Set the Remote Desktop licensing mode.
  2. In the displayed window, select the Enabled option. In the Options area, under Specify the licensing mode for the RD Session Host server, select Per User from the drop-down list.
  3. Click OK.

Limiting Number of Connections

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Limit number of connections.
  2. In the displayed window, select the Enabled option, then set RD Maximum Connections allowed to 999999.
  3. Click OK.

Allowing Users to Connect Remotely Using Remote Desktop Services

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Allow users to connect remotely using Remote Desktop Services.
  2. In the displayed dialog box, select the Enabled option.
  3. Click OK.

Restrict Remote Desktop Services Users to a Single Remote Desktop Services Session

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Restrict Remote Desktop Services user to a single Remote Desktop Services session.
  2. In the displayed window, select the Disabled option.
  3. Click OK.

Setting Time Limit for Disconnected Sessions

  1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Session Time Limits. Double-click Set time limit for disconnected sessions.
  2. In the displayed window, select Enabled for Set time limit for disconnected sessions, and change the value of End a disconnected session to 1 minute.
  3. Click OK.

Disabling Automatic Root Certificates Update (CBH V3.3.26.0 or Later)

If your CBH system is earlier than V3.3.26.0, skip this operation. If your CBH system is upgrade to V3.3.26.0 or later, perform the following steps.

  1. Choose Administrative Templates > System > Internet Communication Management.
  2. Double-click Internet Communication Settings.
  3. Select Enabled.
  4. Then, click OK.

    Figure 1 Trun off Automatic Root Certificates Update

Configuring Certificate Path Validation Settings (CBH V3.3.26.0 or Later)

If your CBH system is earlier than V3.3.26.0, skip this operation. If your CBH system is upgrade to V3.3.26.0 or later, perform the following steps:

  1. Choose Windows Settings > Security Settings > Public Key Policies.
  2. Double-click Certificate Path Validation Settings.
  3. Click the Network Retrieval tab.
  4. Clear the Automatically update certificates in the Microsoft Root Certificate Program (recommended) check box.

    Set Default URL retrieval timeout (in seconds) to 1.

  5. Then, click OK.

    Figure 2 Certificate Path Validation Settings

Refreshing the Local Group Policy

  1. Close the Local Group Policy Editor window.
  2. Open the Run box and run the gpupdate /force command to refresh the local policy.
  3. The application publish server has been deployed. To test its function, add this server to the CBH system.