Set a default associations configuration file, Start File Explorer with ribbon minimized, Turn off Data Execution Prevention for Explorer, Turn off numerical sorting in File Explorer, Verify old and new Folder Redirection targets point to the same share before redirecting, Turn off tracking of last play time of games in the Games folder, Prevent the computer from joining a homegroup, Restrict Accelerators to those deployed through Group Policy, Bypass prompting for Clipboard access for scripts running in any process, Bypass prompting for Clipboard access for scripts running in the Internet Explorer process, Define applications and processes that can access the Clipboard without prompting, Turn off the ability to launch report site problems using a menu option, Include updated website lists from Microsoft, Turn on Internet Explorer 7 Standards Mode, Turn on Internet Explorer Standards Mode for local intranet, Use Policy List of Internet Explorer 7 sites, Prevent specifying the code download path for each computer, Prevent access to Delete Browsing History, Prevent deleting ActiveX Filtering, Tracking Protection, and Do Not Track data, Prevent deleting InPrivate Filtering data, Prevent deleting temporary Internet files, Prevent deleting websites that the user has visited, Prevent the deletion of temporary Internet files and cookies, Allow active content from CDs to run on user machines, Allow Install On Demand (except Internet Explorer), Allow Install On Demand (Internet Explorer), Allow Internet Explorer to use the HTTP2 network protocol, Allow Internet Explorer to use the SPDY/3 network protocol, Allow software to run or install even if the signature is invalid, Automatically check for Internet Explorer updates, Check for signatures on downloaded programs, Do not allow ActiveX controls to run in Protected Mode when Enhanced Protected Mode is enabled, Do not allow resetting Internet Explorer settings, Empty Temporary Internet Files folder when browser is closed, Turn off loading websites and content in the background to optimize performance, Turn off sending UTF-8 query strings for URLs, Turn off the flip ahead with page prediction feature, Turn on 64-bit tab processes when running in Enhanced Protected Mode on 64-bit versions of Windows, Allow websites to store application caches on client computers, Allow websites to store indexed databases on client computers, Set application caches expiration time limit for individual domains, Set application cache storage limits for individual domains, Set indexed database storage limits for individual domains, Set maximum application cache individual resource size, Set maximum application cache resource list size, Set maximum application caches storage limit for all domains, Set maximum indexed database storage limit for all domains, Start Internet Explorer with tabs from last browsing session, Allow active content over restricted protocols to access my computer, Allow cut, copy or paste operations from the clipboard via script, Allow drag and drop or copy and paste files, Allow loading of XAML Browser Applications, Allow only approved domains to use ActiveX controls without prompt, Allow only approved domains to use the TDC ActiveX control, Allow OpenSearch queries in File Explorer, Allow previewing and custom thumbnails of OpenSearch query results in File Explorer, Allow script-initiated windows without size or position constraints, Allow scripting of Internet Explorer WebBrowser controls, Allow VBScript to run in Internet Explorer, Allow video and animation on a webpage that uses an older media player, Allow websites to open windows without status bar or Address bar, Allow websites to prompt for information by using scripted windows, Don't run antimalware programs against ActiveX controls. When using Windows Remote Desktop Connection, some users may have encountered an issue where Vic-3D 9 has a program failure when importing or viewing images in a project file. Change Group Policy processing to run asynchronously when a slow network connection is detected. Set the policy named Use WDDM graphics display driver for Remote Desktop Connections to Enabled. - Use WDDM graphics display driver for Remote Desktop Connections Background: PAM was experiencing slowness in opening RDP session for some Windows target device The issue was solved after turn off this group policy for Windows target device side. To solve "Your Remote Desktop Service session has ended. Way 1. Configure Applications preference extension policy processing, Configure Data Sources preference extension policy processing, Configure Devices preference extension policy processing, Configure Direct Access connections as a fast network connection, Configure Drive Maps preference extension policy processing, Configure Environment preference extension policy processing, Configure Files preference extension policy processing, Configure Folder Options preference extension policy processing, Configure folder redirection policy processing, Configure Folders preference extension policy processing, Configure Group Policy slow link detection, Configure Ini Files preference extension policy processing, Configure Internet Explorer Maintenance policy processing, Configure Internet Settings preference extension policy processing, Configure Local Users and Groups preference extension policy processing, Configure Network Options preference extension policy processing, Configure Network Shares preference extension policy processing, Configure Power Options preference extension policy processing, Configure Printers preference extension policy processing, Configure Regional Options preference extension policy processing, Configure Registry preference extension policy processing, Configure Scheduled Tasks preference extension policy processing, Configure Services preference extension policy processing, Configure Shortcuts preference extension policy processing, Configure software Installation policy processing, Configure Start Menu preference extension policy processing, Configure user Group Policy loopback processing mode, Configure web-to-app linking with app URI handlers, Determine if interactive users can generate Resultant Set of Policy data, Enable AD/DFS domain controller synchronization during policy refresh, Remove users' ability to invoke machine policy refresh, Set Group Policy refresh interval for computers, Set Group Policy refresh interval for domain controllers, Specify startup policy processing wait time, Specify workplace connectivity wait time for policy processing, Turn off background refresh of Group Policy, Turn off Group Policy Client Service AOAC optimization, Turn off Local Group Policy Objects processing, Turn off access to all Windows Update features, Turn off Automatic Root Certificates Update, Turn off downloading of print drivers over HTTP, Turn off handwriting personalization data sharing, Turn off handwriting recognition error reporting, Turn off Help and Support Center "Did you know?" Specifically, those with onboard + Nvidia Quadro cards. Step 2: Expand the Display adapters and right-click on the built-in graphics device. If you disable this policy setting, Remote Desktop Connections will NOT use WDDM graphics display driver. XPDM and WDDM display drivers cannot co-reside; all graphics adapters in a system must use the same display driver model. blank windows. This policy setting lets you enable WDDM graphics display driver for Remote Desktop Connections. Not me though, I wanted to use WDDM drivers, but found it lead to frequent crashed Remote Desktop sessions on my Win 10 2004+ machines. In the VM, set a codec that is appropriate for the anticipated end-user workloads. If you are using Windows 10 pro v1909, disable 'Use WDDM graphics display driver for Remote Desktop Connection'. (found at Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Remote Session Environment) This thread is locked. Remove frequent programs list from the Start Menu, Remove links and access to Windows Update, Remove Network Connections from Start Menu, Remove pinned programs list from the Start Menu, Remove See More Results / Search Everywhere link, Remove the "Undock PC" button from the Start Menu, Remove user's folders from the Start Menu, Show "Run as different user" command on Start, Show Start on the display the user is using when they press the Windows logo key, Show the Apps view automatically when the user goes to Start, Turn off automatic promotion of notification icons to the taskbar, Turn off feature advertisement balloon notifications, Do not automatically make all redirected folders available offline, Do not automatically make specific redirected folders available offline, Enable optimized move of contents in Offline Files cache on Folder Redirection server path change, Configure Group Policy domain controller selection, Create new Group Policy Object links disabled by default, Set default name for new Group Policy objects, Set Group Policy refresh interval for users, Turn off Help Experience Improvement Program, Prompt for password on resume from hibernate/suspend, Connect home directory to root of the share, Specify network directories to sync at logon/logoff time only, Do not preserve zone information in file attachments, Hide mechanisms to remove zone information, Inclusion list for moderate risk file types, Notify antivirus programs when opening attachments, Configure Windows spotlight on lock screen, Do not suggest third-party content in Windows spotlight, Do not use diagnostic data for tailored experiences, Turn off Windows Spotlight on Action Center, Do not show recent apps when the mouse is pointing to the upper-left corner of the screen, Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X, Search, Share, Start, Devices, and Settings don't appear when the mouse is pointing to the upper-right corner of the screen, Allow only per user or approved shell extensions, Display confirmation dialog when deleting files, Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon, Do not display the Welcome Center at user logon, Do not move deleted files to the Recycle Bin, Do not track Shell shortcuts during roaming, Hides the Manage item on the File Explorer context menu, Hide these specified drives in My Computer, No Computers Near Me in Network Locations, Pin Internet search sites to the "Search again" links and the Start menu, Pin Libraries or Search Connectors to the "Search again" links and the Start menu, Prevent access to drives from My Computer. Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC, Allow cryptography algorithms compatible with Windows NT 4.0, Specify negative DC Discovery cache setting, Specify positive periodic DC Cache refresh for non-background callers, Use final DC discovery retry setting for background callers, Use initial DC discovery retry setting for background callers, Use maximum DC discovery retry interval setting for background callers, Use positive periodic DC cache refresh for background callers, Use urgent mode when pinging domain controllers, Allow Clipboard synchronization across devices, Select the lid switch action (on battery), Select the lid switch action (plugged in), Select the Power button action (on battery), Select the Power button action (plugged in), Select the Sleep button action (on battery), Select the Sleep button action (plugged in), Select the Start menu Power button action (on battery), Select the Start menu Power button action (plugged in), Energy Saver Battery Threshold (on battery), Energy Saver Battery Threshold (plugged in), Allow applications to prevent automatic sleep (on battery), Allow applications to prevent automatic sleep (plugged in), Allow automatic sleep with Open Network Files (on battery), Allow automatic sleep with Open Network Files (plugged in), Allow network connectivity during connected-standby (on battery), Allow network connectivity during connected-standby (plugged in), Allow standby states (S1-S3) when sleeping (on battery), Allow standby states (S1-S3) when sleeping (plugged in), Require a password when a computer wakes (on battery), Require a password when a computer wakes (plugged in), Specify the system hibernate timeout (on battery), Specify the system hibernate timeout (plugged in), Specify the system sleep timeout (on battery), Specify the system sleep timeout (plugged in), Specify the unattended sleep timeout (on battery), Specify the unattended sleep timeout (plugged in), Turn on the ability for applications to prevent sleep transitions (on battery), Turn on the ability for applications to prevent sleep transitions (plugged in), Specify the display dim brightness (on battery), Specify the display dim brightness (plugged in), Turn off adaptive display timeout (on battery), Turn off adaptive display timeout (plugged in), Turn on desktop background slideshow (on battery), Turn on desktop background slideshow (plugged in), Minimum Idle Connection Timeout for RPC/HTTP connections, Propagation of extended error information, Restrictions for Unauthenticated RPC clients, RPC Endpoint Mapper Client Authentication, All Removable Storage: Allow direct access in remote sessions, All Removable Storage classes: Deny all access, Allow logon scripts when NetBIOS or WINS is disabled, Maximum wait time for Group Policy scripts, Run Windows PowerShell scripts first at computer startup, shutdown, Run Windows PowerShell scripts first at user logon, logoff, Configure the refresh interval for Server Manager, Do not display Initial Configuration Tasks window automatically at logon, Do not display Server Manager automatically at logon, Turn off automatic termination of applications that block or cancel shutdown, Allow downloading updates to the Disk Failure Prediction Model, Allow Storage Sense Temporary Files cleanup, Configure Storage Sense Cloud Content dehydration threshold, Configure Storage Sense Recycle Bin cleanup threshold, Configure Storage Storage Downloads cleanup threshold, Detect application failures caused by deprecated COM objects, Detect application failures caused by deprecated Windows DLLs, Detect application installers that need to be run as administrator, Detect applications unable to launch installers under UAC, Detect compatibility issues for applications and drivers, Configure Corrupted File Recovery Behavior, Disk Diagnostic: Configure custom alert text, Disk Diagnostic: Configure execution level, Microsoft Support Diagnostic Tool: Configure execution level, Microsoft Support Diagnostic Tool: Restrict tool download, Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider, Troubleshooting: Allow users to access recommended troubleshooting for known problems, Configure MSI Corrupted File Recovery Behavior, Configure Security Policy for Scripted Diagnostics, Troubleshooting: Allow users to access and run Troubleshooting Wizards, Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshooting Control Panel (via the Windows Online Troubleshooting Service - WOTS), Diagnostics: Configure scenario execution level, Diagnostics: Configure scenario retention, Configure the level of TPM owner authorization information available to the operating system, Configure the list of blocked TPM commands.