asked on

When I log on to SBS2003 server using RDP as admin, I see other user's RDP seesion. How can I prevent this?

Typically our users don't have this problem, but a new RDP user does. He can RDP to server normally using his own credentials, then he RDP's to his workstation on our company domain. All works well, except--when he closes his session (by clicking the 'X' on the RDP drop-own menu bar (not logging off). When he logs back on the old session persists--this is also OK. However, when I, the admin, log on using my administrator credentials, I see his session open on the server. Again, this doesn't happen to our other RDP users. I don't want to see his session. What is different and how can this be prevented?

ASKER CERTIFIED SOLUTION

Philip Elder

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

FrankU09

ASKER

I'm a new hire and this is the environment I walked into. I don't know why they are doing it this way. Maybe because this was a way to get it done; albeit, not the right way. I will research and suggest it to them. Thank you. Your suggestion really does look like the proper way to do it.

Until they decide to do it differently, how can I prevent seeing the other user's RDP?

Philip Elder

Since they are ALL domain admins, which means that they are sharing the same priviledges as god, there is no way that I can think of other than in Terminal Services Configuration trying the Limit Users to a Single Session setting.

Philip

FrankU09

ASKER

They are NOT all admins. They only belong to the remote desktop users and domain users groups.

Philip Elder

Then I am missing something since it sounds like they are connecting to the server first via 3389 then RDP into their desktop?

Philip

SOLUTION

LateNiteR

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

LateNiteR

...sorry, instead of browsing to the desktop file system via Windows Explorer, accessing a desktop share or making a static mapping to a share on the remote PC connected via VPN.

FrankU09

ASKER

I'm not sure what 3389 is, but they first use RDP to connect to our server from outside of our network, then, once connected to the server, they use RDP to connect to their workstation that is on the domain. They can't connect directly to their workstations through our firewall. Seems very convoluted to me, but it is what it is--for the moment.

Philip Elder

3389 is the port number used by RDP to listen for incoming calls. TSGrinder put a stop to us doing the same.

Philip

FrankU09

ASKER

It finally clicked...the 3389. Thanks. We are definitely using different logons. I am using ADMINISTRATOR and he is using his XXX. It is the most bizarre thing. The other users don't have this issue. I may just delete and re-create his user profile.