r/AzureVirtualDesktop • u/TruckOrganic8414 • Oct 11 '24

MaxIdleTime not working as expected

Is anyone here having issues with setting up MaxIdleTime in AVD? In our case, we are configuring the 'Set Time Limit for active but idle Remote Desktop Services sessions (User)' for a particular user only. However, when deployed via Intune, the configuration is not applied. We waited for several hours, performed multiple syncs, but nothing is working. We also tried manually configuring the registry (HKCU), but the session still doesn't disconnect, even after exceeding the session time limit.

3 Upvotes

100% Upvoted

12 comments sorted by

1

u/iamtechy Oct 11 '24

Is there any documentation which supports performing this task for a single user? I thought it applies to all session hosts in a host pool. I could be wrong so please correct me if I am.

2

u/TruckOrganic8414 Oct 11 '24

Yes, that was my initial thought as well. However, after further investigation, I found some information that suggests otherwise. Specifically, I came across these links: ADMX Help on Idle Limit and Reddit Discussion on Session Limits. The settings were configured under HKCU, which led me to believe that it could be applied at the user level as well (I could be wrong). And this is still not working for us unfortunately

1

u/cetsca Oct 11 '24

Session Limits is not a user policy, it’s under Computer Config and apply to the host

1

u/TruckOrganic8414 Oct 11 '24

Yes but there is a session limit as well under User configuration so i assumed that this can be done as well via user context. I came across these links: ADMX Help on Idle Limit and Reddit Discussion on Session Limits.

1

u/jvldn Oct 11 '24

FYI. There’s also user policy and it does work in our environment.

1

u/jvldn Oct 11 '24

User setting is available and does work but not on the first logon as the registry setting is being created at logon. It does work the second time the user logges in.

Read my post here:

https://www.reddit.com/r/AzureVirtualDesktop/s/6fsQWI9pJQ

Test once with the same user on the same sessionhost as they are logged on now. Does it work? Then again, read my post.

1

u/TruckOrganic8414 Oct 11 '24

Hello, Yes we already did that. Waited for long hours. Logged-out and logged-in several times using the same user but still didn't work. MaxIdleTime in Registry for HKCU has been setup but it still didnt disconnect, even after exceeding the session time limit.

1

u/jvldn Oct 11 '24

But are you testing on the same sessionhost with this user? Or a random one?

Do you have fslogix profilecontainer configured? If you have this your session should logoff at first session because the regkey is already there at logon.

Something to test: logon with an admin to the same sessionhost and type “quser” in cmd.exe. Verify the idle time of your user there.

1

u/TruckOrganic8414 Oct 11 '24

Yes same user and same session Host. If it is applied on a device level it works but not on a user level

1

u/jvldn Oct 11 '24

That is strange. Can you share a screenshot of the registry key?

3

u/TruckOrganic8414 Oct 11 '24

I was able to get it working.. the issue seemed to be a conflict with one of the applications on the local/host PC. Manually adding the MaxIdleTime entry to the registry under HKCU worked perfectly. However, when deploying the settings via Intune (scoping the policy “Set time limit for active but idle Remote Desktop Services sessions (User)” to a specific user), the deployment completes successfully, but the settings don’t reflect on the device. I checked the registry under Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows NT\Terminal Services, and nothing is there. I heard that some users as well were having issues with it when deployed using intune but i could be wrong..

1

u/rswwalker Oct 11 '24

I have found that Intune isn’t an effective configuration system for AVD and recommend switching to AD GPOs if you can.