mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-22 18:27:23 +00:00
433 lines
14 KiB
Markdown
433 lines
14 KiB
Markdown
---
|
|
title: Policy CSP - RemoteShell
|
|
description: Policy CSP - RemoteShell
|
|
ms.author: maricia
|
|
ms.topic: article
|
|
ms.prod: w10
|
|
ms.technology: windows
|
|
author: nickbrower
|
|
ms.date: 11/01/2017
|
|
---
|
|
|
|
# Policy CSP - RemoteShell
|
|
|
|
|
|
|
|
<hr/>
|
|
|
|
<!--StartPolicies-->
|
|
## RemoteShell policies
|
|
|
|
<dl>
|
|
<dd>
|
|
<a href="#remoteshell-allowremoteshellaccess">RemoteShell/AllowRemoteShellAccess</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-maxconcurrentusers">RemoteShell/MaxConcurrentUsers</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-specifyidletimeout">RemoteShell/SpecifyIdleTimeout</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-specifymaxmemory">RemoteShell/SpecifyMaxMemory</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-specifymaxprocesses">RemoteShell/SpecifyMaxProcesses</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-specifymaxremoteshells">RemoteShell/SpecifyMaxRemoteShells</a>
|
|
</dd>
|
|
<dd>
|
|
<a href="#remoteshell-specifyshelltimeout">RemoteShell/SpecifyShellTimeout</a>
|
|
</dd>
|
|
</dl>
|
|
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-allowremoteshellaccess"></a>**RemoteShell/AllowRemoteShellAccess**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Allow Remote Shell Access*
|
|
- GP name: *AllowRemoteShellAccess*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-maxconcurrentusers"></a>**RemoteShell/MaxConcurrentUsers**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *MaxConcurrentUsers*
|
|
- GP name: *MaxConcurrentUsers*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-specifyidletimeout"></a>**RemoteShell/SpecifyIdleTimeout**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Specify idle Timeout*
|
|
- GP name: *IdleTimeout*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-specifymaxmemory"></a>**RemoteShell/SpecifyMaxMemory**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Specify maximum amount of memory in MB per Shell*
|
|
- GP name: *MaxMemoryPerShellMB*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-specifymaxprocesses"></a>**RemoteShell/SpecifyMaxProcesses**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Specify maximum number of processes per Shell*
|
|
- GP name: *MaxProcessesPerShell*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-specifymaxremoteshells"></a>**RemoteShell/SpecifyMaxRemoteShells**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Specify maximum number of remote shells per user*
|
|
- GP name: *MaxShellsPerUser*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
<!--StartPolicy-->
|
|
<a href="" id="remoteshell-specifyshelltimeout"></a>**RemoteShell/SpecifyShellTimeout**
|
|
|
|
<!--StartSKU-->
|
|
<table>
|
|
<tr>
|
|
<th>Home</th>
|
|
<th>Pro</th>
|
|
<th>Business</th>
|
|
<th>Enterprise</th>
|
|
<th>Education</th>
|
|
<th>Mobile</th>
|
|
<th>Mobile Enterprise</th>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/checkmark.png" alt="check mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
<td><img src="images/crossmark.png" alt="cross mark" /></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<!--EndSKU-->
|
|
<!--StartScope-->
|
|
[Scope](./policy-configuration-service-provider.md#policy-scope):
|
|
|
|
> [!div class = "checklist"]
|
|
> * Device
|
|
|
|
<hr/>
|
|
|
|
<!--EndScope-->
|
|
<!--StartDescription-->
|
|
<!--EndDescription-->
|
|
> [!TIP]
|
|
> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md).
|
|
|
|
> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy).
|
|
|
|
> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect).
|
|
|
|
<!--StartADMX-->
|
|
ADMX Info:
|
|
- GP English name: *Specify Shell Timeout*
|
|
- GP name: *ShellTimeOut*
|
|
- GP path: *Windows Components/Windows Remote Shell*
|
|
- GP ADMX file name: *WindowsRemoteShell.admx*
|
|
|
|
<!--EndADMX-->
|
|
<!--EndPolicy-->
|
|
<hr/>
|
|
|
|
Footnote:
|
|
|
|
- 1 - Added in Windows 10, version 1607.
|
|
- 2 - Added in Windows 10, version 1703.
|
|
- 3 - Added in Windows 10, version 1709.
|
|
|
|
<!--EndPolicies-->
|
|
|