What policy can I use to lock the VDI screen if the end user is not active for 10 minutes?
Can this cause the session to be disconnected?
Yes, this can be accomplished with group policy using the Horizon ADMX templates.
See here for documentation:
Configure Desktop Session Timeouts in Horizon Console