Good afternoon!

We're using the latest/greatest Horizon build and have zero clients connecting to Windows 10 VMs using their domain logon creds.  On the Windows 10 machines (via group policy), we set the usual logon banners about monitoring, etc.  We also have a policy that enables a locking screensaver after 20 minutes.

We have just discovered the following "feature":

1. User enters credentials into the Horizon client from the zero client, selects their desktop pool, and is connected to a VM.

2.  User gets the logon banner/message but does NOT click OK (Goes to get coffee)

3.  User comes back 25 minutes later (they drink a LOT of coffee!)

4.  The screen appears to be locked and user hits CTRL-ALT-DEL.  This takes them back to the logon banner from Step 2 (Without re-entering a password).  User clicks OK and is then logged into Windows without any additional actions like re-entering their password

In the past (Probably 2-3 years ago), this behavior resulted in the session getting stuck as we had a colleague that would sometimes forget to hit OK and we'd need to clear or log-off his session from the Horizon console.

As a workaround, we'll probably just use the logon message within Horizon instead of a Windows GPO but wanted to see if others have seen and dealt with this situation via other methods.