Terminal Services Group Policy Template for Windows 2000

[Jill Hagen-Kovach]

This is an administrative template designed to modify Windows 2000
Terminal Services settings through a group policy object. To use it
save the code into a file entitled ts.adm in the %systemroot%\inf
folder. In your group policy MMC select computer configuration,
Administrative Templates. Right click on the Administrative Templates
folder and select Add/Remove Templates. Click the Add button and
select the ts.adm file. The Terminal Services folder will be located
under Windows Components. NOTE: Before you can see the configurable
values you need to change the view within the MMC. Select the View
menu and deselect Show Policies Only.
This policy is based largely on the Terminal Services segment of the
System.adm on Windows XP but it has been modified to work on Windows
2000. This policy contains ONLY a subset of the configurable Terminal
Services options and is designed ONLY for Windows 2000 systems.

This policy template was developed by William M. Weist and Jill S. E.
Hagen-Kovach.

*************************************************

#if version <= 2

CLASS MACHINE
CATEGORY !!GPEOnly
POLICY !!GPEOnlyPolicy
KEYNAME "Software\Policies"
PART !!GPEOnly_Tip1 TEXT
END PART
PART !!GPEOnly_Tip2 TEXT
END PART
END POLICY
END CATEGORY

#endif

#if version >= 4

CLASS MACHINE
CATEGORY !!GPEOnly
POLICY !!GPEOnlyPolicy
KEYNAME "Software\Policies"
PART !!GPEOnly_Tip1 TEXT
END PART
PART !!GPEOnly_Tip2 TEXT
END PART
END POLICY
END CATEGORY

#endif

#if version == 3

CLASS MACHINE

CATEGORY !!TS_WINDOWSCOMPONENTS
KEYNAME "SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp"

CATEGORY !!TS_GP_NODE

CATEGORY !!TS_REDIRECTION
POLICY !!TS_CLIENT_CLIPBOARD
EXPLAIN !!TS_CLIPBOARDMAP_EXPLAIN
VALUENAME "fDisableClip"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_CLIENT_AUDIO
EXPLAIN !!TS_AUDIOMAP_EXPLAIN
VALUENAME "fDisableCam"
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY

POLICY !!TS_CLIENT_COM
EXPLAIN !!TS_COMPORTMAP_EXPLAIN
VALUENAME "fDisableCcm"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_CLIENT_PRINTER
EXPLAIN !!TS_PRINTERMAP_EXPLAIN
VALUENAME "fDisableCpm"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_CLIENT_LPT
EXPLAIN !!TS_LPTPORTMAP_EXPLAIN
VALUENAME "fDisableLPT"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_CLIENT_DRIVE_M
EXPLAIN !!TS_CLIENT_DRIVE_EXPLAIN_M
VALUENAME "fDisableCdm"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_CLIENT_DEFAULT_M
EXPLAIN !!TS_CLIENT_DEFAULT_EXPLAIN_M
VALUENAME "fForceClientLptDef"
VALUEON NUMERIC 0
VALUEOFF NUMERIC 1
END POLICY

END CATEGORY ;TS_REDIRECTION

CATEGORY !!TS_EP

POLICY !!TS_PASSWORD
EXPLAIN !!TS_PROMPT_PASSWORD_EXPLAIN
VALUENAME "fPromptForPassword"
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY

POLICY !!TS_ENCRYPTION_POLICY
EXPLAIN !!TS_ENCRYPTION_EXPLAIN
PART !!TS_ENCRYPTION_LEVEL DROPDOWNLIST
VALUENAME "MinEncryptionLevel"
ITEMLIST
NAME !!TS_Low_Level VALUE NUMERIC 1
NAME !!TS_Client_Compatible VALUE NUMERIC 2 DEFAULT
NAME !!TS_High_Level VALUE NUMERIC 3
END ITEMLIST
END PART
PART !!TS_ENCRYPTION TEXT
END PART
END POLICY

END CATEGORY ;TS_EP

CATEGORY !!TS_SESSIONS
POLICY !!TS_SESSIONS_OVERRIDE_USERSETTINGS
EXPLAIN !!TS_SESSIONS_OVERRIDE_USER_SETTINGS
PART !!TS_THANK_JILL_AND_BILL TEXT
END PART
PART !!TS_THANK_JILL_AND_BILL_2 TEXT
END PART
ACTIONLISTON
VALUENAME "fInheritMaxDisconnectionTime" VALUE NUMERIC 0
VALUENAME "fInheritMaxIdleTime" VALUE NUMERIC 0
VALUENAME "fInheritMaxSessionTime" VALUE NUMERIC 0
VALUENAME "fInheritResetBroken" VALUE NUMERIC 0
END ACTIONLISTON
ACTIONLISTOFF
VALUENAME "fInheritMaxDisconnectionTime" VALUE NUMERIC 1
VALUENAME "fInheritMaxIdleTime" VALUE NUMERIC 1
VALUENAME "fInheritMaxSessionTime" VALUE NUMERIC 1
VALUENAME "fInheritResetBroken" VALUE NUMERIC 1
END ACTIONLISTOFF
END POLICY

POLICY !!TS_SESSIONS_DISCONNECTED_TIMEOUT
EXPLAIN !!TS_SESSIONS_DISCONNECTED_TIMEOUT_EXPLAIN
ACTIONLISTOFF
VALUENAME "MaxDisconnectionTime" VALUE "0"
END ACTIONLISTOFF
PART !!TS_SESSIONS_ENDDISCONNECTED DROPDOWNLIST NOSORT
VALUENAME "MaxDisconnectionTime"
ITEMLIST
NAME !!TS_TIME_NEVER VALUE NUMERIC 0 DEFAULT
NAME !!TS_TIME_1MIN VALUE NUMERIC 60000
NAME !!TS_TIME_5MIN VALUE NUMERIC 300000
NAME !!TS_TIME_10MIN VALUE NUMERIC 600000
NAME !!TS_TIME_15MIN VALUE NUMERIC 900000
NAME !!TS_TIME_30MIN VALUE NUMERIC 1800000
NAME !!TS_TIME_1HR VALUE NUMERIC 3600000
NAME !!TS_TIME_2HR VALUE NUMERIC 7200000
NAME !!TS_TIME_3HR VALUE NUMERIC 10800000
NAME !!TS_TIME_1DAY VALUE NUMERIC 86400000
NAME !!TS_TIME_2DAY VALUE NUMERIC 172800000
END ITEMLIST
END PART
END POLICY

POLICY !!TS_SESSIONS_LIMITS
EXPLAIN !!TS_SESSIONS_LIMITS_EXPLAIN
PART !!TS_SESSIONS_ACTIVELIMIT DROPDOWNLIST NOSORT
VALUENAME "MaxConnectionTime"
ITEMLIST
NAME !!TS_TIME_NEVER VALUE NUMERIC 0 DEFAULT
NAME !!TS_TIME_1MIN VALUE NUMERIC 60000
NAME !!TS_TIME_5MIN VALUE NUMERIC 300000
NAME !!TS_TIME_10MIN VALUE NUMERIC 600000
NAME !!TS_TIME_15MIN VALUE NUMERIC 900000
NAME !!TS_TIME_30MIN VALUE NUMERIC 1800000
NAME !!TS_TIME_1HR VALUE NUMERIC 3600000
NAME !!TS_TIME_2HR VALUE NUMERIC 7200000
NAME !!TS_TIME_3HR VALUE NUMERIC 10800000
NAME !!TS_TIME_1DAY VALUE NUMERIC 86400000
NAME !!TS_TIME_2DAY VALUE NUMERIC 172800000
END ITEMLIST
END PART
END POLICY

POLICY !!TS_SESSIONS_IDLE_LIMIT
EXPLAIN !!TS_SESSIONS_IDLE_LIMIT_EXPLAIN
PART !!TS_SESSIONS_IDLELIMITTEXT DROPDOWNLIST NOSORT
VALUENAME "MaxIdleTime" REQUIRED
ITEMLIST
NAME !!TS_TIME_NEVER VALUE NUMERIC 0 DEFAULT
NAME !!TS_TIME_1MIN VALUE NUMERIC 60000
NAME !!TS_TIME_5MIN VALUE NUMERIC 300000
NAME !!TS_TIME_10MIN VALUE NUMERIC 600000
NAME !!TS_TIME_15MIN VALUE NUMERIC 900000
NAME !!TS_TIME_30MIN VALUE NUMERIC 1800000
NAME !!TS_TIME_1HR VALUE NUMERIC 3600000
NAME !!TS_TIME_2HR VALUE NUMERIC 7200000
NAME !!TS_TIME_3HR VALUE NUMERIC 10800000
NAME !!TS_TIME_1DAY VALUE NUMERIC 86400000
NAME !!TS_TIME_2DAY VALUE NUMERIC 172800000
END ITEMLIST
END PART
END POLICY

POLICY !!TS_SESSION_END_ON_LIMIT
EXPLAIN !!TS_SESSION_END_ON_LIMIT_EXPLAIN
PART !!TS_SESSIONS_RESETBROKEN DROPDOWNLIST NOSORT
VALUENAME "fResetBroken"
ITEMLIST
NAME !!TS_DISCONNECT_FROM_SESSION VALUE NUMERIC 0
NAME !!TS_END_SESSION VALUE NUMERIC 1
END ITEMLIST
END PART
END POLICY

END CATEGORY ;TS_SESSIONS

POLICY !!TS_REMOTECONTROL
EXPLAIN !!TS_REMOTECONTROL_EXPLAIN
PART !!TS_REMOTECONTROL_Levels DROPDOWNLIST NOSORT
VALUENAME "Shadow"
ITEMLIST
NAME !!TS_REMOTECONTROL_0 VALUE NUMERIC 0 DEFAULT
NAME !!TS_REMOTECONTROL_1 VALUE NUMERIC 1
NAME !!TS_REMOTECONTROL_2 VALUE NUMERIC 2
NAME !!TS_REMOTECONTROL_3 VALUE NUMERIC 3
NAME !!TS_REMOTECONTROL_4 VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY

END CATEGORY ; TS_GP_NODE

END CATEGORY ; WindowsComponents

#endif

[strings]
GPEOnly="GP Only"
GPEOnlyPolicy="TS.ADM"
GPEOnly_Tip1="The ts.adm file is for Windows 2000 only"
GPEOnly_Tip2="None of its policies will be displayed here"
TS_AUDIOMAP_EXPLAIN="Allow users to play server audio on the local
computer, or vice versa, during a Terminal services session. \n\nBy
default, Terminal Server does not allow users to access the output of
server audio devices on their local computers ("audio redirection").
\n\nIf you enable this setting, users of the Terminal server can
redirect audio data. \n\nIf you disable this setting, audio
redirection is never allowed.\n\n If you do not configure this
setting, audio redirection is not specified at the Group Policy level.
However, an administrator can still enable or disable audio
redirection by using the Terminal Services Configuration
tool.\n\nNote: Audio redirection is enabled by default for Remote
Desktop users on Windows Professional and Server.\n\nNote: Audio
redirection is enabled by default for Remote Desktop users on Windows
Professional but disabled by default for Remote Desktop (remote
administration) connections to Windows Server."
TS_CLIENT_AUDIO="Allow audio redirection"
TS_CLIENT_CLIPBOARD="Do not allow clipboard redirection"
TS_CLIENT_COM="Do not allow COM port redirection"
TS_CLIENT_COMPATIBLE="Client Compatible"
TS_CLIENT_DEFAULT_M="Do not set default client printer to be default
printer in a session"
TS_CLIENT_DEFAULT_EXPLAIN_M="Directs Terminal Services not to specify
the default client printer as the default printer in a Terminal
Services session.\n\nBy default, Terminal Services automatically
designates the default client printer as the default printer in a
Terminal Services session. Use this setting to override this default
behavior.\n\nIf you enable this setting, the terminal server does not
set the default client printer as the default printer in the session.
Instead, the default printer is that which is specified at the server.
\n\nIf you disable this setting, the default printer is always the
default client printer. \n\nIf you do not configure this setting, the
default printer is not enforced at the Group Policy level. However, an
administrator can configure the default printer for client sessions by
using the Terminal Services Configuration tool."
TS_CLIENT_DRIVE_M="Do not allow drive redirection"
TS_CLIENT_DRIVE_EXPLAIN_M="Disables the mapping of client drives in
Terminal Services sessions. \n\nBy default, Terminal Services maps
client drives automatically upon connection. Mapped drives appear in
the session folder tree in Windows Explorer or My Computer in the
format \\TSClient\<driveletter>$. \n\nIf you enable this setting,
client drive mapping is not allowed in Terminal Services sessions.
\n\nIf you disable this setting, client drive redirection is always
allowed.\n\n If you do not configure this setting, client drive
redirection is not specified at the Group Policy level. However, an
administrator can still disable client drive redirection by using the
Terminal Services Configuration tool."
TS_CLIENT_LPT="Do not allow LPT port redirection"
TS_CLIENT_PRINTER="Do not allow client printer redirection"
TS_CLIENT_PRINTER_EXPLAIN="Directs Terminal Services to map client
printers and display them in the user's printer list during Terminal
Services sessions.\n\nIf you enable this setting, client printers are
mapped automatically upon connection to a terminal server or Remote
Desktop. \n\nIf you disable this setting, automatic client printer
mapping is never allowed.\n\n If you do not configure this setting,
automatic client printer mapping is not specified at the Group Policy
level. \n\nNote: This setting is overridden if you enable the Terminal
Services setting "Do not allow client printer redirection"."
TS_CLIPBOARDMAP_EXPLAIN="Disables the sharing of clipboard contents
("clipboard redirection") between terminal servers and client
computers in a Terminal Services session. \n\nBy default, Terminal
Services allows users to redirect clipboard data to and from the
terminal server and the local computer. \n\nIf you enable this
setting, users of the terminal server cannot redirect clipboard data.
\n\nIf you disable this setting, clipboard redirection is always
allowed.\n\n If you do not configure this setting, clipboard
redirection is not specified at the Group Policy level. However, an
administrator can still disable clipboard redirection using the
Terminal Services Configuration tool."
TS_COMPORTMAP_EXPLAIN="Disables the redirection of data to client COM
ports from the server in Terminal Services sessions. \n\nUse this
setting to prevent users from redirecting data to COM port peripherals
or mapping local COM ports while they are logged on to a terminal
server. By default, Terminal Services allows users to redirect COM
port data. \n\nIf you enable this setting, Terminal Services users
cannot redirect server data to the local COM port. \n\nIf you disable
this setting, COM port redirection is always allowed.\n\n If you do
not configure this setting, COM port redirection is not specified at
the Group Policy level. However, an administrator can still disable
local COM port redirection using the Terminal Services Configuration
tool.
TS_DISABLE_CONNECTIONS="Do not allow new client connections"
TS_DISABLE_CONNECTIONS_EXPLAIN="Disables new client connections to the
terminal server. \n\nThis setting prevents terminal servers from
accepting new connections, without terminating existing sessions.
Existing connections remain active until the user logs off or the
connection times out.\n\nIf you enable this setting, the terminal
server remains active but does not accept new connections. \n\nIf you
disable this setting, the terminal server accepts new client
connections to the limit set in the "Limit number of connections"
setting. Or, if "Limit number of connections" is not configured, the
limit set in the Network Adapter tab of the Terminal Services
Configuration tool is applied. \n\nIf you do not configure this
setting, the disabling of new client connections is not specified at
the Group Policy level.\n\nNote: Because users cannot reconnect to
disconnected sessions when this setting is in effect, you might want
to remove the Disconnect item from the Shut Down Windows dialog box in
Terminal Services sessions. To do this, enable the "Remove Disconnect
item from the Start Menu" setting. "
TS_DISCONNECT_FROM_SESSION="Disconnect from session"
TS_EP="Encryption and Security"
TS_ENCRYPTION="Choose the encryption level from the drop-down list."
TS_ENCRYPTION_EXPLAIN="Directs Terminal Services to enforce the
specified encryption level for all data sent between the client and
the server during Terminal Services connections. \n\nIf you enable
this setting, encryption is set to the level you specify (Client
Compatible or High) for all connections to the server. By default,
Encryption is set at the Client Compatible level. \n\nThe Client
Compatible level encrypts data sent between the client and the server
at the maximum key strength supported by the client. Use this level
when the terminal server is running in an environment containing mixed
or legacy clients.\n\nThe High level encrypts data sent from client to
server and from server to client by using strong 128-bit encryption.
Use this level when the terminal server is running in an environment
containing 128-bit clients only (such as Windows XP clients). Clients
that do not support this level of encryption cannot connect. \n\nIf
you disable this setting or do not configure it, the encryption level
is not enforced. However, administrators can set the encryption level
at the server using the Terminal Services Configuration tool."
TS_ENCRYPTION_LEVEL="Encryption Level"
TS_ENCRYPTION_POLICY="Set client connection encryption level"
TS_END_SESSION="End Session"
TS_GP_NODE="Terminal Services"
TS_HIGH_LEVEL="High Level"
TS_LOW_LEVEL="Low Level"
TS_LPTPORTMAP_EXPLAIN="Disables the redirection of data to client LPT
ports during Terminal Services sessions. \n\nBy default, Terminal
Services allows users to map local LPT ports and redirect data from
the server to local LPT port peripherals. \n\nIf you enable this
setting, Terminal Services users cannot redirect server data to the
local LPT port. \n\nIf you disable this setting, LPT port redirection
is always allowed.\n\n If you do not configure this setting, LPT port
redirection is not specified at the Group Policy level. However, an
administrator can still disable local LPT port redirection using the
Terminal Services Configuration tool."
TS_PASSWORD="Always prompt client for password upon connection"
TS_PRINTERMAP_EXPLAIN="Disables the mapping of client printers in
Terminal Services sessions. \n\nUse this setting to prevent users from
routing printing jobs from the server to a printer attached to their
local computer. By default, Terminal Services allows client printer
mapping. \n\nIf you enable this setting, users cannot route printing
jobs from the server to a printer attached to their local computer in
Terminal Services sessions. \n\nIf you disable this setting, the
client printer mapping setting in the Terminal Service Configuration
tool determines printer redirection. \n\nIf you do not configure this
setting, client printer mapping is not specified at the Group Policy
level. However, an administrator can still disable client printer
mapping using the Terminal Services Configuration tool."
TS_PROMPT_PASSWORD="If enabled, Terminal Services always prompts users
for passwords."
TS_PROMPT_PASSWORD_EXPLAIN="If you enable this setting, users cannot
automatically log on to a terminal server or access a Remote Desktop
by supplying their passwords in the Remote Desktop Connection client.
The local computer administrator cannot configure the computer to
allow automatic sending of passwords.\n\nIf you disable this setting,
the local computer administrator cannot change it, and users can send
passwords automatically if they configure their client to do so.\n\nIf
you do not configure this setting, the local computer administrator
can use the Terminal Services Configuration tool to either allow or
prevent automatic sending of passwords."
TS_REDIRECTION="Client/Server data redirection"
TS_REMOTECONTROL="Remote control settings"
TS_REMOTECONTROL_EXPLAIN="Sets rules for remote control of Terminal
Services user sessions. \n\nUse this setting to configure the level of
remote control and permissions required from the user for remote
control of Terminal Services user sessions. Remote control can be
established with or without a user's permission. There are two levels
of remote control: the View Session level, which only allows you to
watch the user's session, or the Full Control level, in which you can
interact with a user's session. \n\nTo use this setting, select one of
the five options in the "Remote control" setting list. Click "No
remote control allowed" to disable remote control completely. \n\nBy
default, Terminal Services allows the "View Session upon permission
granted by user" level of remote control.\n\nIf you enable this
setting, administrators can remotely interact with a user's Terminal
Services session according to the specified rules. \n\nIf you disable
this setting or do not enable it, remote control rules will be
determined by the server administrator.\n\nNote: This setting appears
in both Computer Configuration and User Configuration. If both
settings are configured, the Computer Configuration setting
overrides."
TS_REMOTECONTROL_Levels="Options:"
TS_REMOTECONTROL_0="No remote control allowed"
TS_REMOTECONTROL_1="Full Control with user's permission "
TS_REMOTECONTROL_2="Full Control without user's permission"
TS_REMOTECONTROL_3="View Session with user's permission "
TS_REMOTECONTROL_4="View Session without user's permission"
TS_SESSION_END_ON_LIMIT="Terminate session when time limits are
reached"
TS_SESSION_END_ON_LIMIT_EXPLAIN="Directs Terminal Services to
terminate timed-out sessions rather than disconnect them.\n\nUse this
setting to specify that sessions are terminated (that is, the user is
logged off and the session is deleted from the server) instead of
being disconnected after time limits for active or idle sessions are
reached. Time limits are set locally by the server administrator or in
Group Policy. See the "Set time limits for active sessions" and "Set
time limits for idle sessions" settings.\n\nIf you enable this
setting, sessions that reach a time-out limit are terminated.\n\nIf
you disable this setting, timed-out sessions are always disconnected,
even if specified otherwise by the server administrator.\n\nIf you do
not enable this setting, timed-out sessions are disconnected unless
specified otherwise in local settings.\n\nNote: this setting only
applies to time-out limits that are deliberately set (in Terminal
Services Configuration or Group Policy), not to time-out events that
occur due to connectivity or network conditions. Also note that this
setting appears in both Computer Configuration and User Configuration.
If both settings are configured, the Computer Configuration setting
overrides."

TS_SESSIONS_ACTIVELIMIT= "Active session limit :"
TS_SESSIONS="Sessions"
TS_SESSIONS_DISCONNECTED_TIMEOUT="Set time limit for disconnected
sessions"
TS_SESSIONS_ENDDISCONNECTED="End a disconnected session"
TS_SESSIONS_EXPLAIN="Sets limits for Terminal Services sessions.
\n\nIf you enable this setting, Terminal Services sessions are subject
to the specified limits. You can specify how long a session will be
kept active in a disconnected state, and that active and idle
connected sessions must be disconnected (or terminated) after a
specified time. You can also specify that disconnected sessions must
be reconnected from the original client.\n\nIf you disable this
setting or do not enable it, the default values of no limits are
used."
TS_SESSIONS_DISCONNECTED_TIMEOUT_EXPLAIN="Sets the maximum amount of
time that a disconnected Terminal Services session is kept active on
the server.\n\nBy default, Terminal Services allows users to
disconnect from a remote session without logging off and ending the
session. When a session is in a disconnected state, running programs
are kept active even though the user is not actively connected. By
default, these disconnected sessions are maintained for an unlimited
time on the server. \n\nIf you enable this setting, disconnected
sessions are deleted from the server after the specified amount of
time. To enforce the default behavior and specify that disconnected
sessions are unlimited, select "Never".\n\nIf you disable this setting
or do not configure it, time limits for disconnected sessions are not
specified at the Group Policy level.\n\nNote: this setting does not
apply to console sessions, such as Remote Desktop sessions to
computers running Windows Professional. Also note that this setting
appears in both Computer Configuration and User Configuration. If both
settings are configured, the Computer Configuration setting
overrides."
TS_SESSIONS_IDLE_LIMIT="Set time limit for idle sessions"
TS_SESSIONS_IDLE_LIMIT_EXPLAIN="Sets a time limit for active but idle
Terminal Services sessions.\n\nUse this setting to specify the maximum
amount of time an active Terminal Services session can be idle (that
is, no user input) before the user session is automatically
disconnected. By default, Terminal Services allows users an unlimited
time for an active session, even if the session is idle. \n\nTo use
this setting, select the idle session limit in the drop-down list. To
enforce the default behavior and specify that idle sessions are
unlimited, select "Never". \n\n If you enable this setting, active but
idle sessions are automatically disconnected after the specified
amount of time. The user receives a two-minute warning that the
Terminal Services session is about to end, allowing him or her to
press a key to keep the session active.\n\nIf you disable this setting
or do not configure it, time limits for active but idle sessions are
not specified at the Group Policy level.\n\nNote: Idle session limits
do not apply to the console session. To specify that user sessions are
terminated at time-out, enable the setting "Terminate session when
time limits are reached". Also note that this setting appears in both
Computer Configuration and User Configuration. If both settings are
configured, the Computer Configuration setting overrides."
TS_SESSIONS_IDLELIMIT= "Idle session limit :"
TS_SESSIONS_IDLELIMITTEXT= "Idle session limit :"
TS_SESSIONS_LIMITS="Set time limit for active sessions"
TS_SESSIONS_LIMITS_EXPLAIN="Sets a time limit for active Terminal
Services sessions.\n\nUse this setting to specify the maximum amount
of time a Terminal Services session can be active before the user
session is automatically disconnected. By default, Terminal Services
allows users an unlimited time for an active session. \n\nTo use this
setting, select the Active session limit in the drop-down list. To
enforce the default behavior and specify that active sessions are
unlimited, select "Never". \n\n If you enable this setting, Terminal
Services ends active remote sessions after the specified amount of
time. The user receives a two-minute warning that the Terminal
Services session is about to end, allowing him or her to save open
files and close programs.\n\nIf you disable this setting or do not
configure it, time limits for active sessions are not specified at the
Group Policy level.\n\nNote: active session limits do not apply to the
console session. To specify that user sessions are terminated at
time-out, enable the setting "Terminate session when time limits are
reached". Also note that this setting appears in both Computer
Configuration and User Configuration. If both settings are configured,
the Computer Configuration setting overrides."
TS_SESSIONS_OVERRIDE_USERSETTINGS="Override User Session Settings"
TS_SESSIONS_OVERRIDE_USER_SETTINGS="Enables the local machine policy
to override session settings inherited from the user's group
policies."
TS_SESSIONS_RESETBROKEN="When Session Limit is Reached or Connection
is broken:"
TS_THANK_JILL_AND_BILL="This Terminal Services Administrative Template
brought to you by"
TS_THANK_JILL_AND_BILL_2="Jill S. E. Hagen-Kovach and William M.
Weist"
TS_TIME_NEVER="Never"
TS_TIME_1MIN="1 minute"
TS_TIME_5MIN="5 minutes"
TS_TIME_10MIN="10 minutes"
TS_TIME_15MIN="15 minutes"
TS_TIME_30MIN="30 minutes"
TS_TIME_1HR="1 hour"
TS_TIME_2HR="2 hours"
TS_TIME_3HR="3 hours"
TS_TIME_1DAY="1 day"
TS_TIME_2DAY="2 days"
TS_WINDOWSCOMPONENTS="Windows Components"

; Category Strings

TS_Comp_Help="Controls Terminal Services configuration and properties
of client sessions for individual computers or groups of computers."
TS_EP_Help="Controls logon settings and data encryption for Terminal
Services sessions."
TS_REDIRECTION_Help="Controls access to data and devices on a client
computer in Terminal Services sessions."
TS_Sessions_Comp_Help ="Controls time limits and reconnection
configuration for all Terminal Services connections to the computer."
TS_Sessions_Help="Allows configuration of Terminal Services clusters
in the Terminal Services Session Directory service."
TS_Sessions_User_Help="Controls time limits and reconnection
configuration for Terminal Services connections for individual users
or groups of users."
TS_User_Help="Controls user settings for Terminal Services sessions
for individual users or groups of users."

; Online Help Strings
ADM_TITLE="Group Policy settings for Windows 2000"
USER="User Configuration"
COMPUTER="Computer Configuration"
COMPUTER_EXPLAIN="Contains settings that may only be used to configure
Computers."
USER_EXPLAIN="Contains settings that may only be used to configure
Users."
SUPPORTEDON="Requirements:"

; End Strings

*************************************************

[Peter Bergler [MSFT]]

Thanks Jill!

--
This posting is provided "AS IS" with no warranties, and confers no rights.

Please contact me through the newsgroups - then everyone benefits, and you
get all the expert opinions

"Jill Hagen-Kovach" <jill_...@yahoo.com> wrote in message
news:c2a5d44a.03031...@posting.google.com...