RDS 2016 session limits

I figured it out. I setup two CAP policies for disabling printer redirection and enabling printer redirection. I then configured user groups for each. Once I assigned the users to the respective groups, I configured a Computer GPO only to enable printer redirection, added the two RDS servers in the scope of the policy and linked the policy to the OU where the RDS servers live. Once I did that, I could change group membership and depending on the group, the printers would either redirection or not.

While it's true that the internet only seems to know about the session host time limits, it turns out that there is a TS/RDS gateway time limit as well.

These time limits allow you to configure an idle timeout (in minutes) and an overall session timeout (in minutes). The configuration can be found in the RD Gateway Manger (on Windows Server 2008r2) under the Server > Policies > Connection Authorization Policies. Right click the appropriate policy, select Properties and click on the Timeouts tab.

In my case the Enable session timeout setting was enabled and set to 480 minutes (8 hours) and configured to Disconnect the session.

Note that this is a new setting in Server 2008r2 RDS and that it is not configurable by Group Policy. You can read more about this setting on the "What's new in Remote Desktop Services" page on Technet.

One reason this setting may be hard to find on the internet is the change in vocabulary, specifically the use of the word "timeout" instead of "time limit".