> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truu.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Group Policy Setup for Shared Workstation

| Policy Name                                                 | Default Setting | Configurable Options                             |
| ----------------------------------------------------------- | --------------- | ------------------------------------------------ |
| Limit Concurrent Signed-in Users                            | 10 Users        | 1-999 users (value below 1 is auto-adjusted)     |
| Deleted User Profiles Older Than a Specified Number of Days | Not Configured  | Integer Value (days), enforced at system restart |

### Purpose

To define and enforce user session limits and automated profile lifecycle management on shared Windows workstations. These policies are intended to preserve system stability, optimize disk usage, and maintain a consistent user experience in multi-user environments.

### Scope

These policies apply to all shared Windows workstations within the organization where multiple users may sign in over time or concurrently.

### Policy Details

1. Configure Limit Concurrent Signed-In Users

**Description:** Specifies the maximum number of users who can be signed in concurrently on a shared workstation.

**Options:**

* **Not Configured or Disabled:** The default limit of 10 concurrent users is enforced.
* **Enabled:** Administrators can configure an integer value between 1 and 999.
  * Allowing more than a few concurrent users will slow down the system's performance, if possible, allow only one user login at a time or keep the number to the lower possible value
  * Values below 1 are automatically adjusted to 1.
  * When the configured limit is reached and a new user attempts to sign in, the oldest active session is automatically signed out, allowing the new user to sign in successfully. **Default Setting:** 10 users.

2. Delete User Profiles Older Than a Specified Number of Days

**Description:** Automatically deletes local user profiles that have not been used within a specified number of days. Profile cleanup is evaluated and performed during system restart.

**Options:**

* **Not Configured or Disabled:** No automatic deletion of user profiles is performed.
* **Enabled:** Administrators specify an integer value representing the number of days of inactivity after which user profiles are eligible for deletion.
  * One day is interpreted 24 hours after the profile was last accessed.
  * At the next system restart, the User Profile Service deletes all profiles exceeding the configured inactivity threshold. **Implementation Notes:**
  * Profile deletion is performed using Windows supported mechanisms only.
  * Profiles currently in use are not deleted.
  * This policy is commonly used in shared, lab, kiosk, or transient-user environments.
  * This policy is Microsoft default policy if you encounter any issue with this policy, please reach out Microsoft **Default Setting:** Not Configured.

### Configuration Steps

1. Open Group Policy Management Console (GPMC).
2. Navigate to:
   Computer Configuration → Administrative Templates → TruU → Frontline Access → Limit Concurrent Signed-In Users

Configure the following settings as required:

* Limit Concurrent Signed-in User

Computer Configuration → Administrative Templates → System → User Profiles.

Configure the following settings as required:

* Delete user profiles older than a specified number of days on system restart

3. Link and enforce the GPO to the appropriate Organizational Units (OUs).

### Recommendations

* Set the concurrent user limit based on workstation hardware capacity and usage patterns.
* Enable profile deletion by age in environments with frequent user turnover to prevent disk space exhaustion.
* Carefully select the inactivity threshold to balance storage optimization with user convenience.

***

[Configuring Physical Access Badge for Shared Workstation](/docs/physical-access-badge)

[Shared Workstation Installation and Deployment](/docs/sahred-workstation-installation)