Microsoft Knowledge Base Email Alertz

Remote Desktop sessions may be disconnected during Group Policy updates in Windows Server 2008

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 2083411 - Last Review: June 29, 2010 - Revision: 1.0

Remote Desktop sessions may be disconnected during Group Policy updates in Windows Server 2008

SYMPTOMS

When you use the Remote Desktop Services role to enable clients to connect remotely, those clients may be suddenly disconnected. After this issue occurs, connections can then be reestablished within a brief period.

CAUSE

This issue may occur if the following conditions are true:
  • You have configured the Don't allow connections to this computer Remote Desktop setting on the server. Or, you have installed the unattended Remote Desktop role, without configuring the allowed connections.
  • You have configured the Allow users to connect remotely using Terminal Services Group Policy setting to override the setting on the server.
  
When the policy is refreshed (by default, every 90 minutes, or manually through GPUPDATE), the policy settings are deleted and then reset. During this period, the configuration on the server is temporarily valid. Therefore, all sessions may be disconnected.

RESOLUTION

To resolve this issue, set the fDenyTSConnections registry value to 0. (See the "More information" section.)

Note When Remote Desktop Services is installed, the default setting is Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure). 

MORE INFORMATION

This setting is controlled by the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server
fDenyTSConnections
When this value is set to 1, no connections are allowed. However, Group Policy can override this setting. During the Group Policy refresh process, this local setting may be temporarily valid.

APPLIES TO
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Datacenter without Hyper-V
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Enterprise without Hyper-V
  • Windows Server 2008 R2 Foundation
  • Windows Server 2008 R2 Standard
  • Windows Server 2008 R2 Standard without Hyper-V
  • Windows Server 2008 Service Pack 2
  • Windows Server 2008 Standard without Hyper-V
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
Keywords: 
KB2083411
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate