Modifying the Group Policy

Local Group Policy Editor

Open the Run box and enter gpedit.msc to open Local Group Policy Editor.

Using the Specified Remote Desktop License Servers

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Use the specified Remote Desktop license servers.
2. In the displayed window, select the Enabled option.
3. Click OK.

Hiding Notifications About RD Licensing Problems that Affect the RD Session Host Server

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Hide notifications about RD Licensing problems that affect the RD Session Host Server.
2. In the displayed window, select the Enabled option.
3. Then, click OK.

Setting the Remote Desktop Licensing Mode

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing. Double-click Set the Remote Desktop licensing mode.
2. In the displayed window, select the Enabled option. In the Options area, under Specify the licensing mode for the RD Session Host server, select Per User from the drop-down list.
3. Then, click OK.

Limit number of connections

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Limit number of connections.
2. In the displayed window, select the Enabled option, then set RD Maximum Connections allowed to 999999.
3. Then, click OK.

Allowing Remote Start of Unlisted Programs

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Allow users to connect remotely using Remote Desktop Services.
2. In the displayed dialog box, select the Enabled option.
3. Then, click OK.

Restrict Remote Desktop Services users to a single Remote Desktop Services session

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Double-click Restrict Remote Desktop Services user to a single Remote Desktop Services session.
2. In the displayed window, select the Disabled option.
3. Then, click OK.

Setting Time Limit for Disconnected Sessions

1. Choose Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Session Time Limits. Double-click Set time limit for disconnected sessions.
2. In the displayed window, select Enabled for Set time limit for disconnected sessions, and change the value of End a disconnected session to 1 minute.
3. Then, click OK.

Refreshing the Local Group Policy

1. Close the Local Group Policy Editor window.
2. Open the Run box and run the gpupdate /force command to refresh the local policy.
3. The application publish server has been deployed. To test its function, add this server to your bastion host.