I know, that there's an option to allow all users to open multiple sessions to one terminal server. But is there also a way to allow it only for some specific users through Group Policies?


Yes, you can allow multiple sessions only to specific users using GPO in conjunction with Security Groups filtering.

You can create new or edit existing GPO to limit number of sessions per user.

I.e. Enable option specified below in Group Policy Management Console and in Security Filtering section of the Group Policy Management console specify users/groups who this limitation applies to (exclude Everyone) and then ONLY they will be limited to one session.

Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Restrict Remote Desktop users to a single Remote Desktop Services session

Just remove Authenticated Users and add users\groups who should be limited to one session.

enter image description here

  • Emphasis on GROUPS! If you remove Authenticated Users & add a user security group & expect this to work you will get this The following GPOs were not applied because they were filtered out: SoAndSo : Denied (Security) It's because Authenticated Users includes all domain-joined Computers. So you will either have to include the Computers you need (which I had trouble with) or a security GROUP including those Computers technet.microsoft.com/en-us/library/cc759506%28v=ws.10%29.aspx – gregg Apr 6 '15 at 14:24

This site is temporarily in read only mode and not accepting new answers.

Not the answer you're looking for? Browse other questions tagged .