Solved

How to enable session shadowing for non local admin users

Posted on 2009-07-16
5
845 Views
Last Modified: 2013-11-21
Without adding the account to the local admin group, is there a way to enable that account to shadow other session in windows terminal server?

PS: I have already enable the remote session in the account property in AD and also added the account in the permission tab under the listener property.

Thanks.
0
Comment
Question by:Beta99
  • 2
  • 2
5 Comments
 

Expert Comment

by:JdixonCCNA
ID: 24872972
Try the following link...

http://support.microsoft.com/kb/278845
0
 

Expert Comment

by:JdixonCCNA
ID: 24873037
If you want to shadow the session without requiring the session owners permission, i.e. no prompt to accept the shadow on the users session, uncheck the require users permission checkbox in the RDP/TCP settings under Start-Programs-AdministrativeTools-Terminal Services Configuration.
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 24874681
Start the Terminal Services Configuration MMC
Double-click RDP/Tcp, and in the dialog select Security tab to modify the RDP-permisions. Use the Advanced button to grant the Remote Control permission for the user/group.
0
 

Author Comment

by:Beta99
ID: 24878011
JdixonCCNA, I don't have any issue shadowing any sessions, it's the ability to do it w/o admin rights that's my problem.

henjoh09, I've tried it and gave the user full rights but still get an "access denied" error when attempting to shadow a session.



0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 125 total points
ID: 24878694
Modifying the permissions shall work, but changes in RDP-Tcp Properties doesn't affect current sessions makes the users to have to be logged of when doing the modification.
Just tested by myself to refresh my memory, and it doesn't work if the shadowed user is an administrator, propably caused by WIL (Windows Integrity Levels) restricting a process with lower authority token from accessing a process with higher authority token.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question