What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server
?
Similar settings seem to appear in both. For example, the fSingleSessionPerUser key for terminal services. In Server 2012R2 the only way to change this is via the local policy editor (the Administrative Tools item which was in Server 2008 is gone). I assume use gpedit.msc changes the HKLM:\SOFTWARE\Policies
area.
Does the policy setting act as a mask for the other setting, forcing it to a specific state if present?
The server is not part of a domain.
If I'm writing scripts to bootstrap a new machine and want to configure this setting, which is the best place to change it?