Use this diagnostic path for the reported RDS behavior:
- Distinguish lock vs disconnect vs new-session reconnect behavior.
- A disconnected RDS session usually closes the RDP window with an error message, while the session continues on the server.
- If disconnects happen without a consistent timing pattern, investigate network issues rather than configuration.
- Check whether session time limits are forcing disconnects.
- Review these settings in the RDS deployment on the server managing the deployment: Collection > Properties tasks > Session.
- Review Group Policy at: Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Session Time Limits.
- Relevant registry locations:
-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp -
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services -
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Terminal Services
-
-
MaxIdleTimeandMaxConnectionTimeareREG_DWORDvalues and are expressed in milliseconds. - Policy precedence matters:
- Policies override default configurations.
- Computer policies override user policies.
- After changing these settings, users must reconnect or sign out/sign in.
- If users cannot reconnect to the same session and are being placed into a new session, enable keep-alives.
- Configure Configure keep-alive connection interval in: Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections
- The keep-alive interval determines how often, in minutes, the server checks session state.
- Recheck RD Session Host security settings if reconnects still create a new session.
- In Group Policy, review: Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
- On the RD Session Host server:
- Open Remote Desktop Session Host Configuration.
- Under Connections, right-click the connection and select Properties.
- On General, review Security layer.
- Review Encryption level.
- Verify connection limits if active connection limits are not behaving as intended.
- Confirm Remote Desktop is enabled in System > Remote settings > Remote Desktop.
- Review the Group Policy setting: Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections > Limit number of connections
- On the RD Session Host server, also review Remote Desktop Session Host Configuration > Connections > Properties > Network Adapter > Maximum connections.
- If Maximum connections is dimmed, the Group Policy setting is applied.
- For administration-only use, Remote Desktop supports two concurrent remote connections by default. More than two administrative or multiple user connections require the RD Session Host role and appropriate RDS CALs.
- For deeper diagnostics, collect data while reproducing the issue.
- Microsoft provides a diagnostic collection procedure using TSS.
- Run from an elevated PowerShell prompt:
.\TSS.ps1 -Scenario UEX_RDSsrv -start -UEX_Logon - This is the documented next step when the standard checks do not resolve unexpected session locks or disconnections.
The provided material does not include a procedure for inspecting user profile initialization or profile disks specifically. It does provide a supported procedure for inspecting session time-limit policies, reconnect behavior, connection limits, and collecting diagnostics for escalation.