The "Set time limit for active Remote Desktop Services sessions" machine setting should be configured correctly.
[active sessions limit in milliseconds (2 min)]
Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\Set time limit for active Remote Desktop Services sessions
oval:org.secpod.oval:def:19205
SCAP Repo OVAL Definition
2014-05-29