Microsoft MVP Jeremy Moskowitz shows you how to prevent disconnect during GP update / force using registry settings.
How to Prevent a Remote Desktop Connection Drop During GP Update
Hi everybody. This is Jeremy Moskowitz, group policy MVP and founder of Policy Pak software. And in this super short video I’m going to show you how to work around the most annoying thing. You’ve seen this. You’ve had this problem. We’re going to fix it together. Let me show you this problem. You’ve used RDP and connected as some standard user or as an admin to some endpoint machine and you decide you’re going to do something in group policy land and you decide you want to check to see if it’s working. So, you go to run a command prompt and you run gpupdate/force and you’ve seen this. What happens? Well, the connection drops. That’s no fun. So, it turns out there’s a garden variety pack of ways you can solve this. One way is you can walk up to the machine or you can use group policy.
For this demonstration I’m going to just walk up to the machine and show you the registry punch you would need to do to make this problem go away. So, let me reconnect to my computer 1 here. I’m going to log on as an admin here. That’s Trixie. Okay. And now that I’m logged on the session is still there so let’s just run regedit here and I’m the local admin. And I’ve got to find this setting. This is Hkey local machine under system and we dive down under current control set under terminal. So, once we’re on current control set we’re going to just find value. The value we’re looking for is kinda weird. It’s called fDeny. Actually, it’s “fDenyTSConnections,” but if you just search for fDeny here, there it is and you’re looking for fDenyTSConnections. And you can see it’s a 1 here. Check this out. If you set it just to zero and click okay here what should happen is the next time you run gpupdate/force – magic.
It doesn’t close the session and you’re ready to go. So, if you’ve ever had this problem where you’re trying to remote into a machine, run gpupdate to test something and for the love of Pete it’s not working, just remember, you can use that registry setting and you can blast that same registry setting out using group registry preferences or Policy Pak or any number of items. And get it out there and you’ll be ready to go. Hope this video helped you out. Talk to you soon.