Problem Definition:

Users complain that their CloudConnect desktop locks too soon after sitting idle.  Users must re-enter their CloudConnect password to access their desktop into the screen shown below.

Cause:

A CloudConnect Desktop host will lock the screen of any desktop session that sits idle for more than 15 minutes.The idle timeout counter is reset each time the user clicks the mouse anywhere inside the desktop or uses keystrokes inside the CloudConnect Desktop.Idle timeouts are a security best practice.

Resolution:

This setting is a Computer Policy managed by the Local Group Policy Object Editor on the desktop host.Altering this setting will apply to all users assigned to the Desktop Host for which you edit the setting.Using the “support” account, access the Desktop Host where you wish to change the idle account screen lock:

From the Start Menu, type “gpedit.msc” The Editor may take several seconds to load.

 

In the resulting screen, use the tree on the left hand pane and navigate to “User Configuration\Administrative Templates\Control Panel\Personalization\Screen Saver Timeout”

In the right hand pane, right click on Screen Saver Timeout and choose “Edit.” You can then specify the time in Seconds that the Desktop Host will wait for user input until determining the user’s session has become idle and locks the Screen.

 

 

Note: This setting change will not take effect until the user has logged off and logged back on.

Additional Information:

CloudConnect Partners should adjust this setting with caution, as increasing the idle timeout counter will reduce the security of the user’s Desktop content, should the user forget to close their CloudConnect Desktop when not in use. Be sure to carefully consider the customer’s industry, security needs, and user behavior adjusting the idle account lockout timer above.

Applies To:

Microsoft Windows Desktop Server 2008 R2 Standard

Citrix XenApp 6.5