Limit RDP Connections to one user at a time

Damien471 1

Hi,
I have a Windows Server 2016 setup without RDS installed.
I am currently able to login with two separate users simultaneously.
In an effort to restrict this I have set RDP Connection Limit to 1 in GP:
Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connection
Number of sessions per user is also set to 1.
I done a gpupdate /force and a full PC restart but two users are still able to connect simultaneously. If I try to log on with a third user I am then prompted that two users are currently active.

1 answer

Manu Philip 16,966 Reputation points MVP

2020-05-27T16:22:54.003+00:00

Hello @Damien471 ,

Looks like another GPO is blocking it. Use rsop.msc and get all active GPO settings and disable/fine-tune the other GPOs so that this one will work

Please mark as "Accept the answer" if the above steps helps you. Others with similar issues can also follow the solution as per your suggestion

Regards,

Manu
Please sign in to rate this answer.

1 person found this answer helpful.
Damien471 1 Reputation point

2020-05-27T16:29:05.557+00:00

Hi @Manu Philip ,
I ran rsop and the only policy that is being applied to the machine is the policy limiting the number of rdp connections.

Regards,
Damien

Manu Philip 16,966 Reputation points MVP

2020-05-27T16:46:19.42+00:00

Hello,

I see the issue here. The settings you are playing with is to limit unique user session to one. That can't limit multiple RDP from different user names.
In gpedit.msc, navigate to: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. Set the Restrict Remote Desktop Services user to a single Remote Desktop Services session parameter to Enabled,

Thanks,
Manu

Mazen 1 Reputation point

2021-03-02T09:53:14.727+00:00

Hi,
This has worked for me in the following way:
Assume user A is working and has an opened RDP connection (just to differentiate it from session which I assume it means logged on)
And user B is trying to connect.
Assume that they are both normal (not admin users)
B wants to connect while A is working --- B receives a warning message that another user is working and A receives a question if he/she can leave the session to the other user --- If A accepts or 30 seconds pass without feedback from A, the session is closed for A and opened for B, if not, B receives a denial notification, and A continues to work as normal.
If B is admin while A is not I have a different behaviour, because B is automatically denied the access with a notification that the maximum number of users (set as @Damien471 has done) is reached.

The preceding applies only on live connections so when I disconnect (Not log out; logged in still but disconnected the RDP client) there are no restrictions.
Sign in to comment