Remote Session Environment

Applies To: Windows Server 2008

Policy settings in this node control configuration of the user interface in Terminal Services sessions.

The full path of this node in the Group Policy Management Console is:

Computer Configuration\Policies\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Remote Session Environment

Note

If you are using the Local Group Policy Editor, Policies is not part of the node path.

Available policy settings

Name Explanation Requirements

Always show desktop on connection

This policy setting allows you to specify whether the desktop is always displayed after a client connects to a remote computer or whether an initial program can run. It can require that the desktop be displayed after a client connects to a remote computer, even if an initial program is already specified in the default user profile, Remote Desktop Connection, Terminal Services client, or through Group Policy.

If you enable this policy setting, the desktop is always displayed when a client connects to a remote computer. This policy setting overrides any initial program policy settings.

If you disable or do not configure this policy setting, an initial program can be specified that runs on the remote computer after the client connects to the remote computer. If an initial program is not specified, the desktop is always displayed on the remote computer after the client connects to the remote computer.

Note
If this policy setting is enabled, the Start a program on connection policy setting is ignored.

At least Windows Server 2003 with Service Pack 1

Enforce removal of remote desktop wallpaper

This policy setting allows you to specify whether desktop wallpaper is displayed to clients when they are connected to a remote server by using Terminal Services.

You can use this policy setting to enforce the removal of wallpaper during a remote session. By default, Windows XP Professional displays wallpaper to remote clients connecting through Remote Desktop, depending on the client configuration (for more information, see the Experience tab in the Remote Desktop Connection options). By default, servers running Windows Server 2003 do not display wallpaper to remote sessions.

If you enable this policy setting, wallpaper is not displayed to a Terminal Services client.

If you disable this policy setting, wallpaper might appear to a Terminal Services client, depending on the client configuration.

If you do not configure this policy setting, the default behavior applies.

At least Windows XP Professional or Windows Server 2003

Limit maximum color depth

This policy setting allows you to specify the maximum color resolution (color depth) for Terminal Services connections.

You can use this policy setting to set a limit on the color depth of any connection to a terminal server or Remote Desktop. Limiting the color depth can improve connection performance, particularly over slow links, and reduce server load.

If you enable this policy setting, the color depth that you specify is the maximum color depth allowed for a user’s Terminal Services connection. The actual color depth for the connection is determined by the color support available on the client computer. If you select Client Compatible, the highest color depth supported by the client will be used.

Note

A color depth of 24 bit is only supported on Windows XP Professional and Windows Server 2003.

If you disable or do not configure this policy setting, the color depth for connections is determined by the Limit Maximum Color Depth setting on the Client Settings tab in the Terminal Services Configuration tool, unless a lower level is specified by the user at the time of connection.

At least Windows XP Professional or Windows Server 2003

Remove "Disconnect" option from Shut Down dialog

This policy setting allows you to remove the Disconnect option from the Shut Down Windows dialog box on Terminal Services clients.

You can use this policy setting to prevent users from using this familiar method to disconnect their client from a terminal server.

If you enable this policy setting, Disconnect does not appear as an option in the drop-down list in the Shut Down Windows dialog box.

If you disable or do not configure this policy setting, Disconnect is not removed from the drop-down list in the Shut Down Windows dialog box.

Note

This policy setting affects only the Shut Down Windows dialog box. It does not prevent users from using other methods to disconnect from a Terminal Services session. This policy setting also does not prevent disconnected sessions at the server. You can control how long a disconnected session remains active on the server by configuring the Set time limit for disconnection sessions policy setting located in Computer Configuration\Policies\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Session Time Limits.

At least Windows 2000 Terminal Services

Remove Windows Security item from Start menu

This policy setting allows you to specify whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this policy setting to prevent inexperienced users from logging off from Terminal Services inadvertently.

If you enable this policy setting, Windows Security does not appear in Settings on the Start menu. As a result, users must type a security attention sequence, such as CTRL+ALT+END, to open the Windows Security dialog box on the client computer.

If you disable or do not configure this policy setting, Windows Security remains on the Settings menu.

At least Windows 2000 Terminal Services

Set compression algorithm for RDP data

This policy setting allows you to specify which Remote Desktop Protocol (RDP) compression algorithm to use.

By default, servers use an RDP compression algorithm that is based on the server's hardware configuration.

If you enable this policy setting, you can specify which RDP compression algorithm to use. If you select the algorithm that is optimized to use less memory, this option is less memory-intensive, but uses more network bandwidth. If you select the algorithm that is optimized to use less network bandwidth, this option uses less network bandwidth, but is more memory-intensive. Additionally, a third option is available that balances memory usage and network bandwidth.

If you disable or do not configure this policy setting, the default RDP compression algorithm will be used.

At least Windows Vista with Service Pack 1

Start a program on connection

This policy setting allows you to configure Terminal Services to run a specified program automatically upon connection.

You can use this policy setting to specify a program to run automatically when a user logs on to a remote computer.

By default, Terminal Services sessions provide access to the full Windows desktop, unless otherwise specified with this setting, by the server administrator, or by the user in configuring the client connection. Enabling this setting overrides the Start Program settings set by the server administrator or user. The Start menu and Windows Desktop are not displayed, and when the user exits the program the session is automatically logged off.

To use this setting, in the Program path and file name box, type the fully qualified path and file name of the executable file to be run when the user logs on. If necessary, in the Working Directory box, type the fully qualified path to the starting directory for the program. If you leave Working Directory blank, the program runs with its default working directory. If the specified program path, file name, or working directory is not the name of a valid directory, the terminal server connection fails with an error message.

If you enable this policy setting, Terminal Services sessions automatically run the specified program and use the specified working directory (or the program default directory, if Working Directory is not specified) as the working directory for the program.

If you disable or do not configure this policy setting, Terminal Services sessions start with the full desktop, unless the server administrator or user specify otherwise. (For more information, see the Run these programs at user logon policy setting located in Computer Configuration\Policies\Administrative Templates\System\Logon.

Note

This policy setting appears in both Computer Configuration and User Configuration. If both policy settings are configured, the Computer Configuration policy setting takes precedence.

At least Windows Server 2003