Restrict single user connection not working correctly in group policy.

[sandiyan]

As I haven't got any responss from other groups, I am posting the
message in this group to see if anyone can give me some help on the
following issue:

I've got a Win2000 AD domain and I have global group policy setup with
below:

"Restrict Terminal Services users to a single remote session" group
policy to "Disabled".

I was thinking that all Win 2003 machines in this domain will
automagically allow a user to connect multiple times... But it
doesn't.
I also, checked the 'TS configurations' on Windows 2003 and the
attribute for 'Restrict each user to one session' is set to Yes!

It looks like the group policy is not working... I even tried forcing
group policy update... but no luck....

Thanks for your help.
Sandiyan

 

[Buz [MSFT]]

Hello Sandiyan,

I hope this is it:

302883 "Restrict Each User to One Session" Setting in Tscc.msc Does Not Work
http://support.microsoft.com/?id=302883

If not I wonder if you need to install a Windows 2003 ADM to get this
setting to "stick" on a 2003 server.

307900 Upgrading Windows 2000 Group Policy for Windows XP
http://support.microsoft.com/?id=307900

816662 Recommendations for Managing Group Policy Administrative Template
(.adm)
http://support.microsoft.com/?id=816662

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.




Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

 

[sandiyan]

Thanks for the info.

I tried setting it up via default group policy and I simply couldn't
get that to work.

I've ended up running a reg file(as part of the net logon script), to
update following reg value and it works correctly - good old registry!

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services]
"fSingleSessionPerUser"=dword:00000000

cheers,
Sandiyan