I'm having trouble with RDP connections to our management server that I use for accessing services like Active Directory, Group Policy, and DHCP. It seems like every couple of hours, I have to disconnect and reconnect because my account stops being able to access these services, while cloud-based admin portals work fine. Does anyone have suggestions on where I might start looking for the issue?
4 Answers
Have you looked into the RDP timeout policy? It could be set to 2 hours, and that might explain why you’re losing your connection regularly.
You should check the RDP session timeout settings in your Group Policy. Look for the 'Set time limit for disconnected sessions' and 'Set time limit for active but idle sessions.' If these settings don’t match between your management server and the domain controllers, your Kerberos tickets could expire while your session is still open, leading to those ghost connections.
Are you part of the Protected Users group? If so, Kerberos ticket lifetimes are usually set to 4 hours, which could be causing your disconnections.
I have to ask, why do you need to keep adjusting settings like this? In my experience, most of the activities you do in AD are pretty basic, like resetting passwords or managing non-privileged accounts. If your group policies are stable, you shouldn't have to tinker with them often—maybe just once a week? Just thinking out loud here!
Good point, I guess it's just part of the job sometimes.
This might be what’s happening, thanks for the tip!