+ ; When AlwaysGroupCheck=false access will be permitted
+ ; if the group TerminalServerUsers is not defined.
+-AlwaysGroupCheck=false
++AlwaysGroupCheck=true
+ ; When RestrictOutboundClipboard=all clipboard from the
+ ; server is not pushed to the client.
+ ; In addition, you can control text/file/image transfer restrictions
+@@ -80,13 +80,13 @@
+
+ [Logging]
+ ; Note: Log levels can be any of: core, error, warning, info, debug, or trace
+-LogFile=xrdp-sesman.log
++LogFile=/dev/null
+ LogLevel=INFO
+ EnableSyslog=true
+-#SyslogLevel=INFO
+-#EnableConsole=false
+-#ConsoleLevel=INFO
+-#EnableProcessId=false
++SyslogLevel=INFO
++EnableConsole=false
++ConsoleLevel=INFO
++EnableProcessId=false
+
+ [LoggingPerLogger]
+ ; Note: per logger configuration is only used if xrdp is built with
+@@ -117,8 +117,8 @@
+ param=-noreset
+ param=-nolisten
+ param=tcp
+-param=-logfile
+-param=.xorgxrdp.%s.log
++#param=-logfile
++#param=.xorgxrdp.%s.log
+
+ [Xvnc]
+ param=Xvnc
+diff -ur xrdp-0.9.19.orig/xrdp/xrdp.ini xrdp-0.9.19/xrdp/xrdp.ini
+--- xrdp-0.9.19.orig/xrdp/xrdp.ini 2022-03-17 07:16:35.000000000 +0100
++++ xrdp-0.9.19/xrdp/xrdp.ini 2022-04-01 00:53:37.547367844 +0200
+@@ -5,6 +5,9 @@
+ ; fork a new process for each incoming connection
+ fork=true