Easily manage Win 2003 "Remote Desktop"

I believe everyone is familiar with the "Remote Desktop" function in Windows Server 2003. With this feature, any user can easily access and manage the server remotely. . If you use Group Policy Editor to further set up "Remote Desktop", you can make it better for us. Here I will introduce some of the settings for the family.

Tip: Open the “Group Policy Editor” by clicking on “Start → Run”, and type ““gpedit.msc”” in the “Run” dialog box. Press Enter to open the “Group Policy Editor” window.

I. Allow/Disallow "Remote Desktop" Connection

We can use or disable the "Remote Desktop" connection function through Group Policy. In the left pane of the "Group Policy Editor", expand the "Computer Configuration & Rarr; Administrative Templates & Rarr; Windows Components & Rarr; Terminal Services" directory. Click on the directory name <; Terminal Services" in the right pane and double-click the "Allow users to use the Terminal Services Remote Connection" option. Then click on the “Enabled” or “ Disabled” radio button in the Properties dialog box under the “Settings tab and click the “OK” button.

Second, configuration "data redirection"

By configuring client/server data redirection, we can set the client resources that can be used after the connection is established. Double-click the directory name "client/server data redirection", and the client resources that can be set are listed in the right window. If we want to use the client's sound card to play the sound files on the server after successfully establishing the “Remote Desktop” connection, you should double-click the “Allow Audio Redirection” option in the “Provide” setting in the Properties dialog box. Under the card, click the “Allow” option and click the “OK” button to play the sound file remotely. Third, set the idle session connection time

After a successful connection, the session may be idle for some reason (such as forgetting to disconnect), obviously this is not safe. However, we can limit the connection time of idle sessions. Expand the “Session” subdirectory, double-click the “Set time limit for active but idle Terminal Services session” option, open the Properties dialog box, and click ““ Enabled” under the “Settings” tab. ;Options, select a time option (such as 5 minutes) in the "Idle Session Limits" drop-down list box, and click the "OK" button (see figure).

Addendum: Adding Remote Access Users

In actual work, you need to use the "Remote Desktop" function instead of the system administrator alone. Therefore, you can set permissions for users who have this requirement. Although this is not part of the group policy setting, I think it is necessary to add it.

Right-click on “My Computer", select the "Properties" command, and click “Select Remote User> under the "Remote" tab of the “System Properties" ; button. Then click the “Add” button in the “Remote Desktop Users” dialog box, and click the “Advanced → Find Now” button in the “Select User” dialog box. Select the target user from the user list.