The "Set time limit for active Remote Desktop Services sessions" machine setting should be configured correctly. [active sessions limit in milliseconds (2 min)] Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\Set time limit for active Remote Desktop Services sessions oval:org.secpod.oval:def:19205 SCAP Repo OVAL Definition 2014-05-29