Server settings
Service account used to read sessions on each bench (stored encrypted on this server).
RDP firewall guard
When enabled, the dashboard tries to lock direct RDP on the bench so
only your PC can connect. If your environment doesn't allow remote
netsh -r (timeouts in logs), disable this and use the
soft lock only.
Bench Agent (recommended)
Install a tiny agent on each bench that locally manages the
"Remote Desktop Users" group based on the dashboard lock — no remote
netsh -r needed.
Set RDD_BENCH_AGENT_TOKEN in admin.env, then copy the
install command and run it as Administrator on each bench.