How to set custom RDS/RDP timeouts in Windows Server 2012 R2?

Question

RDP

Hello.
There is a standalone Windows Server 2012 R2 (without AD) with the Remote Desktop Services role, timeouts are configured in group policies:

• Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\ Set time limit for disconnected sessions = 30 minutes
  
• Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\ Set time limit for active but idle Remote Desktop Services sessions = 15 minutes
  

Similarly for User Configuration:

• User Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\ Set time limit for disconnected sessions = 30 minutes
  
• User Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits\ Set time limit for active but idle Remote Desktop Services sessions = 15 minutes
  

The profiles of several users to be excluded from this rule have "End of disconnected session" = 2 days and "Idle session limit" = 2 days.
However, these exceptions do not work and these users are thrown out just like everyone else.
I tried different combinations of Computer Configuration and User Configuration settings (individually and all together), but the result is the same. How to properly set timeouts?
PS In a similar question serverfault.com/questions/568107/bypassing-gpo-for... there is no working answer either...

Answer 1

You are doing everything right. It's just a matter of how group policy objects are applied. Get users into a separate group that needs to set separate limits, and set a separate policy for them (only the user config) and set its application after the policy in which you have the main session limit settings.
UPD. Oh, you don't have a domain... The system reads the parameters of session limits first from the GPO (if any), then only from the personal properties of each user. I don't know if it is possible to set several settings in standalone deployment with different GPOs.