Check out the Selective Lock on Disconnect extension!

Afraid not -- at this time the extension applies to all internal users that aren't admins, and all machines. We'll keep that open as a feature request!

Hi Tyler, 

There's an extension in the marketplace called Limited Page Access that literally prevents the Host role from accessing your instance during the hours you select. That might be what you're looking for?

Thanks for the feedback - We're looking to add this to the next version of the Remote Workforce extension! 

Hi JasonJCT, 

Sounds like you might be using an older version of the product. In a recent release, we now retain the AddedNote event, even if the note is deleted. If the note is deleted, we add EventAttributes: UserDeleted to the entry. 

Other partners have had luck taking elements of the remote workforce workflow for internal users. You can restrict a host to access a single remote machine and apply the permissions via LDAP, then use the same session filter and notes combination discussed in the remote workforce doc. 

Thanks, that clears it up! We have this registered as a feature request.