Wow…pretty sure we did not set this number:
WSManConfig: Microsoft.WSMan.Management\WSMan::localhost\Shell
Type Name SourceOfValue Value
System.String IdleTimeout 7200000
The example on page 255 sounds a more reasonable 2,000 hours.
Since the section stresses the importance of Administrator responsibility, how should I proceed for all of our 2008/2012 DCs?
Many of these sorts of things are stored as “number of seconds”.