Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How do I allow Multiple RDP Sessions?

Posted on 2008-06-12
11
Medium Priority
?
33,929 Views
Last Modified: 2012-06-27
When we are logged on to the 2008 Server and remote session is started the server session is logged off and the same goes if 2 of us are using RDP.  In windows server 2003 we could have the server logged on and have multiple sessions of RDP without kicking each other off.   I have played with the Group Policy for Terminal Services but have had no luck.
0
Comment
Question by:ocontoco
  • 4
  • 4
  • 2
  • +1
11 Comments
 
LVL 1

Expert Comment

by:adamroman
ID: 21771026
go to start>programs>administrative tools>terminal services>terminal services configuration

Under general settings change "restrict each user to a single session" to NO
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 375 total points
ID: 21771542
You have several locations where you may need to change a setting in order to allow multiple remote desktop sessions.

The most likely location will be in Group Policy - I suggest you run rsop.msc on the server, then browse to the following container and check whether the policy is applied (or not). After running rsop.msc from the "Search" box on the start menu, go to Computer Configuration, Administrative Templates, Windows Components, Terminal Services and check whether the "Restrict Terminal Services users to a single remote session" setting is Enabled. If it is, note down the policy in which it is enabled, then open that Group Policy and remove the policy.

Alternatively, the other location in which this may be configured is the Terminal Services Manager. This isn't the location I would suspect this is configured - and isn't really the best location for setting it - but to check and possibly remove it, do the following:

Open Terminal Services Configuration. In the console tree, click Server Settings. In the details pane, right-click Restrict each user to one session, and then click Properties. Uncheck the Restrict each user to one session check box, and then click OK.

There's a guide on Technet at http://technet2.microsoft.com/windowsserver/en/library/da5367e2-b506-48e9-8533-f38c28ceb6611033.mspx?mfr=true.

Please remember that the user sessions functionality and Terminal Services is completely revamped in Windows Server 2008. The /console switch which could be used with previous versions of Windows to access the console through RDP will now no longer work, since session 0 is now no longer accessible and interactive for users to actually use (it is just for services to login as). To replace the /console switch is the /admin switch - running mstsc /admin will connect you to the physical console of the server, and when running Terminal Services in Administration Mode (the default, if you have not purchased Terminal Services licenses), you are limited to a maximum of 2 sessions INCLUDING the console. http://blogs.msdn.com/nickmac/archive/2007/11/28/mstsc-console-switch-in-windows-server-2008-and-windows-vista-sp1.aspx

-tigermatt
0
 
LVL 51

Expert Comment

by:Netman66
ID: 21771647
There is a Group Policy element that is not defined by default that may be of some use for you.

In the Default Domain Controller Policy:

Computer Config>Admin Templates>Windows Components>Terminal Services>Connections :: Deny logoff of an Administrator logged into the console session.

Enable this policy element.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:ocontoco
ID: 21772557
tigermatt - Got a question for you are you saying that if we didnt purchase a TS Licensing that we can only have 2 sessions including the console?  Which means only one rdp session is allowed - correct?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 21772630
Yes, only 2 connections are allow for RDP in Admin mode.

In Application mode, you pay per TS CAL.

0
 

Author Comment

by:ocontoco
ID: 21772885
I've used the Group Policies for Terminal Services is there way to restrict RDP session from being able to disconnect the console session?  I have enabled the Deny logoff of Administrator but its not working correctly because it still gives the rdp session user the ability to force the log off.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21772906
Run an rsop.msc from the Search box on the Start Menu, examine the output and ensure the policy is actually being applied.

AS for the licensing - you can only have a maximum of 2 user logins (including the console) if you use Terminal Services in Remote Administration mode. As I said above this differs from Server 2003, where you could have 3 logins - console and two RDP.

-tigermatt
0
 

Author Comment

by:ocontoco
ID: 21772925
I have done this already and it is set.  Could this be because the consule and the rdp session are using the adminstrator login?
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21772934
Ah, that is probably why. If you try another user then I doubt it will happen.
0
 

Author Comment

by:ocontoco
ID: 21772968
I  just test this and this is not true I use my actual user which is a domain admin and it still let me disconnect the adminstrators session.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 21773180
I think it's because you have Administrator rights over the server (since you're a Domain Admin) you are still able to force the user to log off. The GPO isn't going to apply to an Administrator because they have elevated rights to just log off another logged in user using another method if necessary.

From what I can see that GPO is only actually going to apply to non-Administrator user accounts.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question