V-286831

Discussion

Horizon VDI is intended to provide remote desktops and applications, generally during working hours, and for no more than an extended workday. Leaving sessions active for more than what is reasonable for a work day opens the possibility of a session becoming unoccupied and insecure on the client side. For example, if a client connection is opened at 0900, there are few day-to-day reasons that the connection should still be open after 1900; therefore, the connection must be terminated. If the user is still active and environment settings allow it, they can reauthenticate immediately and continue the session.

Check Content

Verify the "vdm_agent*.admx" templates have been added to the Active Directory Domain.

Open the "Group Policy Management" MMC snap-in, then open the applicable GPO that is applying the Horizon settings to the VDI desktops or RDS hosts.

Navigate to Computer Configuration >> Policies >> Administrative Templates >> Omnissa Horizon Agent Configuration >> Agent Configuration.

Double-click the "RDS Connection Time Until Disconnect" setting.

If "RDS Connection Time Until Disconnect" is set to either "Not Configured" or "Disabled", this is a finding.

In the drop-down menu next to "RDS Connection Timeout", if "Never" is selected, this is a finding.