Solved

Microsoft, Terminal Server, Windows 2003, Remote control failed. Error code 5 Error [5]:Access is denied.

Posted on 2008-06-21
8
5,252 Views
Last Modified: 2013-11-21
I have non-administrator User who needs access to the Remote Control feature of Terminal Server to provide other Users with software training.  Starting Terminal Services Manager by using the "Run as..." option, and then logging-in as Administrator doesn't work.

Is there any way this can be done without giving this User full Administrative or Domain Admin rights?
0
Comment
Question by:ShaneO123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 3

Expert Comment

by:blimster
ID: 21839370
This is best done with remote assistance

Use the save as file invitation detailed in the article bellow

http://technet.microsoft.com/en-us/library/bb457004(TechNet.10).aspx
0
 
LVL 3

Expert Comment

by:blimster
ID: 21839372
Forgot to add this note

You need remote assistence to be enabled on the wworkstations.

I know it's a "duhhh" but still.. :)
0
 

Author Comment

by:ShaneO123
ID: 21839409
This is not really an acceptable solution.  The Remote Users are connecting from various workstations all over the county and to arrange remote control of their workstations, when everyone is already connected to the Server via Terminal Services, is not practical.
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 

Accepted Solution

by:
whitesellcorp earned 250 total points
ID: 21900574
I had a similar scenario and these are the steps I used to give Remote Control access to users who didn't need admin rights over the Terminal Server.

1.  Create a local or domain users group and name it "Remote Control" or whatever you prefer.
2.  Open Terminal Services Configuration.  (This is located in START menu under Programs/Admin Tools)
3.  In the left pane select "Connections" and in the right pane select "RDP-Tcp" and click "Properties" from the tool bar.
4.  Select the "Permissions" tab and click the "Advanced" button near the bottom.
5.  Click "Add" and add the user group you created in step 1 then click OK.
6.  Now place a check mark in the "Allow" box next to "Remote Control" then click OK.
7.  Now you can add and remove users from the "Remote Control" users group as needed.

Cheers!!
0
 

Author Comment

by:ShaneO123
ID: 22396674
Firstly, I appologise for not responding sooner.  My membership expired before you posted your reply, and I didn't renew my membership for several weeks.

Secondly, while your reply was detailed, it still DIDN'T work.

I still recieve the following error -

Session (ID 1) remote control failed
(Error 5 - Access is denied.)
0
 
LVL 1

Expert Comment

by:HandelIT
ID: 34069641
I was having the same issue and came to find out that the permissions are actually applied on the session itself.  This means not only does the user trying to do remote control have to log back in, but so does the user that needs to be controlled.  I found this out through trial and error and found that once the end user logged back into the server i was able to remote their session with the permissions i put in place on the connection.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question