The error messages point to two separate but related issues: Remote Desktop licensing/connection limits and Group Policy processing on the terminal server.
- Remote Desktop connection limits
The message "No further connections can be established to the remote computer because the maximum number of clients are already connected to this computer" indicates that the server is hitting a connection limit, not a Group Policy limit.
From the provided context:
- A Windows Server without the full Remote Desktop Services (Terminal Services) role supports only two concurrent remote connections for administrative purposes.
- To allow more than two administrative connections or multiple user connections, the Terminal Services/Remote Desktop Services role must be installed and appropriate client access licenses (CALs) must be in place.
Action points:
- Verify that the Remote Desktop Services role is correctly installed and configured for user sessions, not just for administrative connections.
- Confirm that the licensing mode and CALs match the intended usage (per user/per device) and that the licensing server is reachable.
- Ensure that there are no “stuck” or disconnected sessions consuming the available slots; log them off from Server Manager or Remote Desktop Services Manager.
- Group Policy drive mapping and gpt.ini access error
The drive mapping GPO works on the local PCs but fails in the terminal server session, with an error about accessing gpt.ini. In the context, Group Policy troubleshooting for drive mappings focuses on:
- Confirming that the GPO is applicable and processed.
- Using tools such as gpresult and Group Policy operational logs to verify that the GPO is applied.
Action points based on the context:
- Verify GPO application in the terminal server session
- Log on to the terminal server with the affected user.
- Run:
-
gpresult /h appliedgpo.htmand open the report to confirm that the drive-mapping GPO is listed as applicable.
-
- Check the Group Policy operational log (
Microsoft-Windows-GroupPolicy/Operational) for events indicating whether the GPO and the Drive Maps extension were processed successfully.
- Collect detailed Group Policy and Procmon traces (if needed)
- Use the TSS tool as described:
- Download TSS and run
TSS.ps1 -Start -Scenario ADS_GPOEx -Procmonbefore logging on with the affected user. - After sign-in, run
gpresult /h appliedgpo.htmto confirm applicability. - Stop TSS and analyze the collected Group Policy operational log and Procmon trace to see whether the drive is mapped and then removed or never created.
- Download TSS and run
- Use the TSS tool as described:
- Check for processes removing the mapped drive
- If the drive appears briefly and then disappears, use Procmon with a filter on the drive letter (for example,
Z:) to identify any process (such ascmd.exeornet.exe) that might be deleting the mapped drive during logon.
- If the drive appears briefly and then disappears, use Procmon with a filter on the drive letter (for example,
- gpt.ini access
- Even if the path to gpt.ini is accessible in Explorer, Group Policy processing may still fail if:
- The connection is interrupted (for example, due to the Remote Desktop connection limit issue).
- There are transient access or network issues during policy refresh.
- Resolving the Remote Desktop connection limit and ensuring stable sessions is a prerequisite to reliable Group Policy processing.
- Even if the path to gpt.ini is accessible in Explorer, Group Policy processing may still fail if:
Summary of recommended steps:
- Ensure Remote Desktop Services is properly installed and licensed for user sessions, not just admin connections.
- Clear any excess or disconnected sessions so that only the intended two user sessions are active.
- In a working session, verify GPO application with
gpresultand Group Policy operational logs. - If the drive still fails to map, collect TSS/Procmon traces to see whether another process or script is interfering with the mapped drive.
References: