WEB TABLE 1: Location of Terminal Services Policy Settings
GPO Location Computer Configuration Settings User Configuration Settings
Terminal Services (root folder) User Connection Settings, such as remote control settings, user profile and home directory paths, wallpaper and color depth limitations, starting programs, and limiting number of connections to the server. Also lets you specify whether a server will accept incoming connections at all; this is useful if you want to enable Remote Administration on a lot of servers at once. Remote control settings, programs to start on connection.
Client/Server Data Redirection Enable and disable client port mapping for printers and smart card devices, drive mapping, setting user-specific time zones, and clipboard redirection. N/A
Encryption and Security Require explicit user logon (even if a password is stored in the connection settings) and define the encryption level for the connection. Also contains a subfolder for securing remote procedure call (RPC) communication among servers. N/A
Licensing Specify how Windows 2003 license servers give out licenses to Win2K terminal servers and name a licensing security group (used to restrict the servers allowed to request licenses from a license server, thus reducing the damage that rogue terminal servers on the domain can do). N/A
Temporary Folders Specify whether to use temporary folders per session and whether to delete the temporary file when the session ends. N/A
Session Directory Identify the session directory server for a terminal server cluster and the name of the cluster. These settings apply only to terminal servers running Windows 2003, Enterprise Edition. These servers can use NTLB (or a third-party load balancing solution) to group terminal servers into a cluster with one external IP address and name. When users connect to the cluster, the load balancing directs them to the least-stressed member of the cluster. The session directory lists usernames with their session IDs, so that if a user disconnects from a session with a server in the cluster he or she will be connected to that server again, even if it’s not busy when they try to reconnect. N/A
Sessions Set time limits on how long user sessions are allowed to be disconnected, idle, or active. All settings are available for users.