Further to a Couple of GP settings for setting up Remote Desktop Servers post, there is another setting that is also important:
Disable the "Remove Windows Security item from the Start menu" GP setting. Make the change in the SBS Client Computer GPO.
This makes sure that the "Windows Security" option is available on the Start Menu. When it is there, one can train those who use the Remote Desktop servers or connect to their workstations at the office to lock their Remote Desktop session when they need to walk away from it for a couple of minutes.
It does not matter where that user is, they must lock that system before walking away.
Microsoft Small Business Specialists
*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.