Lock on Disconnect only for specified host sessions

Avatar
  • updated
  • Pending Review

Use case: If I'm connected to a kiosk user session that doesn't have a password, the Lock on Disconnect should not lock the user session. I want the avoid the user needing to use the Windows lockscreen "sign in" to the kiosk session. If I am connected to an admin session however, Lock on Disconnect should lock the session as usual.

To make this possible, either of the following mentionned ways can help with my use-case:

1. Allow specifying host sessions for which to enable the Lock on Disconnect feature (or the other way around). <- my prefered implementation.

2. Allow option for enabling Lock on Disconnect only for sessions with admin rights.

3. Allow option for disabling Lock on Disconnect for sessions without a password (or make this the default behaviour?)

4. Allow option for disabling Lock on Disconnect for Windows Kiosk sessions.

Currently, the only way to achieve a similar behaviour is to use Selective Lock on Disconnect plugin and manually tag a machine before connecting to a Windows session that should get locked on disconnect. This is prone to human error and not viable for my team.

Avatar
0
cmaheu

Any ETA on the review of this? This is still a sercurity concern for since it does not allow us to use Lock on Disconnect.

Avatar
0
cmaheu

What's going on with this feature request? This is still a high priority for us.
Please contact me for details if necessary.

Avatar
0
Scott

For the first of the four points you raised, I believe you can do this natively via a Session Event Automation.

Within the Automation tab on the Administration page, create a new Session Event automation and name it something appropriately.

For the event filter, you want to use something like:

Event.EventType = 'Disconnected' AND Connection.ProcessType = 'Host' AND Session.CustomProperty2 LIKE '*Server*'

And then at the bottom of the modal, add a Session Event of EventType 'QueuedLogonSessionLock'

This automation will perform a session lock anytime a Host disconnects from a Session where CustomProperty2 contains the word 'server'.  You can add additional operands for other checks also.

Here's a screenshot that might help:

Image 1335



Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar