Solved

Microsoft, Terminal Server, Windows 2003, Remote control failed. Error code 5 Error [5]:Access is denied.

Posted on 2008-06-21
8
5,231 Views
Last Modified: 2013-11-21
I have non-administrator User who needs access to the Remote Control feature of Terminal Server to provide other Users with software training.  Starting Terminal Services Manager by using the "Run as..." option, and then logging-in as Administrator doesn't work.

Is there any way this can be done without giving this User full Administrative or Domain Admin rights?
0
Comment
Question by:ShaneO123
8 Comments
 
LVL 3

Expert Comment

by:blimster
ID: 21839370
This is best done with remote assistance

Use the save as file invitation detailed in the article bellow

http://technet.microsoft.com/en-us/library/bb457004(TechNet.10).aspx
0
 
LVL 3

Expert Comment

by:blimster
ID: 21839372
Forgot to add this note

You need remote assistence to be enabled on the wworkstations.

I know it's a "duhhh" but still.. :)
0
 

Author Comment

by:ShaneO123
ID: 21839409
This is not really an acceptable solution.  The Remote Users are connecting from various workstations all over the county and to arrange remote control of their workstations, when everyone is already connected to the Server via Terminal Services, is not practical.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Accepted Solution

by:
whitesellcorp earned 250 total points
ID: 21900574
I had a similar scenario and these are the steps I used to give Remote Control access to users who didn't need admin rights over the Terminal Server.

1.  Create a local or domain users group and name it "Remote Control" or whatever you prefer.
2.  Open Terminal Services Configuration.  (This is located in START menu under Programs/Admin Tools)
3.  In the left pane select "Connections" and in the right pane select "RDP-Tcp" and click "Properties" from the tool bar.
4.  Select the "Permissions" tab and click the "Advanced" button near the bottom.
5.  Click "Add" and add the user group you created in step 1 then click OK.
6.  Now place a check mark in the "Allow" box next to "Remote Control" then click OK.
7.  Now you can add and remove users from the "Remote Control" users group as needed.

Cheers!!
0
 

Author Comment

by:ShaneO123
ID: 22396674
Firstly, I appologise for not responding sooner.  My membership expired before you posted your reply, and I didn't renew my membership for several weeks.

Secondly, while your reply was detailed, it still DIDN'T work.

I still recieve the following error -

Session (ID 1) remote control failed
(Error 5 - Access is denied.)
0
 
LVL 1

Expert Comment

by:HandelIT
ID: 34069641
I was having the same issue and came to find out that the permissions are actually applied on the session itself.  This means not only does the user trying to do remote control have to log back in, but so does the user that needs to be controlled.  I found this out through trial and error and found that once the end user logged back into the server i was able to remote their session with the permissions i put in place on the connection.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Problem Description: Actually I found the below issue with some customers after migration from SMS 2003 to SCCM 2007 and epically if they change site code, some clients may appear in the console with old site code, plus old sites still appearing …
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question