Lock on Disconnect only for specified host sessions

Avatar
  • updated
  • Pending Review

Use case: If I'm connected to a kiosk user session that doesn't have a password, the Lock on Disconnect should not lock the user session. I want the avoid the user needing to use the Windows lockscreen "sign in" to the kiosk session. If I am connected to an admin session however, Lock on Disconnect should lock the session as usual.

To make this possible, either of the following mentionned ways can help with my use-case:

1. Allow specifying host sessions for which to enable the Lock on Disconnect feature (or the other way around). <- my prefered implementation.

2. Allow option for enabling Lock on Disconnect only for sessions with admin rights.

3. Allow option for disabling Lock on Disconnect for sessions without a password (or make this the default behaviour?)

4. Allow option for disabling Lock on Disconnect for Windows Kiosk sessions.

Currently, the only way to achieve a similar behaviour is to use Selective Lock on Disconnect plugin and manually tag a machine before connecting to a Windows session that should get locked on disconnect. This is prone to human error and not viable for my team.

Avatar
0
cmaheu

Thank you, this solved our concern.

Avatar
1
Scott

For the first of the four points you raised, I believe you can do this natively via a Session Event Automation.

Within the Automation tab on the Administration page, create a new Session Event automation and name it something appropriately.

For the event filter, you want to use something like:

Event.EventType = 'Disconnected' AND Connection.ProcessType = 'Host' AND Session.CustomProperty2 LIKE '*Server*'

And then at the bottom of the modal, add a Session Event of EventType 'QueuedLogonSessionLock'

This automation will perform a session lock anytime a Host disconnects from a Session where CustomProperty2 contains the word 'server'.  You can add additional operands for other checks also.

Here's a screenshot that might help:

Image 1335

Avatar
0
cmaheu

What's going on with this feature request? This is still a high priority for us.
Please contact me for details if necessary.

Avatar
0
cmaheu

Any ETA on the review of this? This is still a sercurity concern for since it does not allow us to use Lock on Disconnect.



Top contributors

Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar
Avatar