Required group policies for Remote Desktop Session hosts

0 users found this article helpful

Symptoms

If group policies (GPOs) are not correctly configured, this error may occur:

The Client Execute request could not be satisfied because the requested application was blocked by policy from being launched on the server.

Resolution

The Windows Remote Desktop application servers that Parallels Secure Workspace connects to should have the following Group policies applied.

  • Computer Configuration / Policies / Administrative Templates / Windows Components / Remote Desktop Services / Remote Desktop Session Host / Connections:
    • Required:
      • Restrict Remote Desktop Services users to a single Remote Desktop Services sessions: Disabled
      • Automatic reconnection: Enabled
    • Needed when publishing programs in Parallels Secure Workspace as an RDP application :
      • Allow remote start of unlisted programs: Enabled
         
  • Computer Configuration / Policies / Administrative Templates / Windows Components / Remote Desktop Services / Remote Desktop Sessions Host / Session Time Limits:
    • Required:
      • Set time limit for disconnected sessions: End a disconnected session in 1 minute
      • Set time limit for logoff of RemoteApp sessions: RemoteApp session log off delay Immediately
         
  • Computer Configuration / Policies / Administrative Templates / Windows Components / Remote Desktop Services / Remote Desktop Sessions Host / Device and Resource Redirection:
    • Recommended:
      • Allow time zone redirection: Enabled

 

The following user group policies are optional, but can be used to restrict some interactions. 
Note that in older Windows versions the term "Windows Explorer" is used instead of "File Explorer".

 

 

Was this article helpful?

Tell us how we can improve it.