How to use the Group Policy Editor to manage remote desktops

Remote access, remote management, is the demand of many users nowadays. So under the win2003 system, how to manage the remote desktop effectively and easily? Here, we can use the working principle of the group policy editor to achieve our purpose. Tip: Open the “Group Policy Editor” by clicking on “Start → Run” and type ““gpedit.msc”” in the “Run” dialog box and press Enter to open “Group Policy Editor” window.

1. Allow/disallow "Remote Desktop" connection

Allow or disallow the use of "Remote Desktop" via Group Policy. In the left pane of the "Group Policy Editor", expand the "Computer Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Terminal Services" directory. Click on the directory name <; Terminal Services" in the right pane and double-click the "Allow users to use the Terminal Services Remote Connection" option. Then click on the “Enabled” or “ Disabled” radio button in the Properties dialog box under the “Settings tab and click the “OK” button.

Second, configuration "data redirection"

By configuring client/server data redirection, we can set the client resources that can be used after the connection is established. Double-click the directory name "client/server data redirection", and the client resources that can be set are listed in the right window. If we want to use the client's sound card to play the sound files on the server after successfully establishing the “Remote Desktop” connection, you should double-click the “Allow Audio Redirection” option in the “Provide” setting in the Properties dialog box. Under the card, click the “Allow” option and click the “OK” button to play the sound file remotely.

Third, set the idle session connection time

After a successful connection, the session may be idle for some reason (such as forgetting to disconnect), obviously this is not safe . However, we can limit the connection time of idle sessions. Expand the “Session” subdirectory, double-click the “Set time limit for active but idle Terminal Services session” option, open the Properties dialog box, and click ““ Enabled” under the “Settings” tab. ;Options, select a time option (such as 5 minutes) in the "Idle Session Limits" drop-down list box, and click the "OK" button (see figure).

Addendum: Adding Remote Access Users

In practice, you need to use the "Remote Desktop" feature to be more than just a system administrator. Therefore, you can set permissions for users who have this requirement.

Right-click on “My Computer", select the "Properties" command, and click “Select Remote User> under the "Remote" tab of the “System Properties" ; button. Then click the “Add” button in the “Remote Desktop Users” dialog box, and click the “Advanced → Find Now” button in the “Select User” dialog box. Select the target user from the user list.

In fact, it is not difficult to manage the remote desktop. We only need to use the group policy editor to set the remote desktop, so that the win2003 system users can effectively manage the remote desktop.