So at this time, the setup is purely a test lab/proof of concept...
I have successfully gotten a 2012r2 server to publish apps including one that was not on the initial list of available apps and was added by me.
A major concern is that this app will be involved in uses that involves sensitive data... So to that end, I am looking to ensure that the session(s) are unique and secure. Right now the settings I am using are:
Session tab
End a disconnected session: 1 minute
Active session limit: Never
Idle session limit: Never
When the session limit is reached or a connection is broken: End the session
Temporary folder settings: Both checked
----------
Security tab
Default settings
---------
User profile disks disabled
----------
So one of the things that I was trying to figure out, is there a way to make the ending of a disconnected session happen in a time frame of shorter than 1 minute? I figure there may be a registry change involved in that...
Additionally, is there any way to ensure that the data that is put into the app during the session is indeed deleted on the session close?
Also, it seems like multiple sessions from a single user are not logged to the connections pane, in fact it looks like a second connection from the same user on the same day is logged as a new connection and the old connection is simply replaced by the new one in the list... It seems like the session info is not being kept, the temp files and other data does look like it is being deleted on session close, but firing up a new session seems to simply erase the info of the old one on the connections pane. Are there any better monitoring tools that can be used for this... Or are there logs somewhere that would differentiate between multiple sessions from the same user?
This posting is provided "AS IS" with no warranties, and confers no rights.