Solved

How to enable session shadowing for non local admin users

Posted on 2009-07-16
5
856 Views
Last Modified: 2013-11-21
Without adding the account to the local admin group, is there a way to enable that account to shadow other session in windows terminal server?

PS: I have already enable the remote session in the account property in AD and also added the account in the permission tab under the listener property.

Thanks.
0
Comment
Question by:Beta99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 

Expert Comment

by:JdixonCCNA
ID: 24872972
Try the following link...

http://support.microsoft.com/kb/278845
0
 

Expert Comment

by:JdixonCCNA
ID: 24873037
If you want to shadow the session without requiring the session owners permission, i.e. no prompt to accept the shadow on the users session, uncheck the require users permission checkbox in the RDP/TCP settings under Start-Programs-AdministrativeTools-Terminal Services Configuration.
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 24874681
Start the Terminal Services Configuration MMC
Double-click RDP/Tcp, and in the dialog select Security tab to modify the RDP-permisions. Use the Advanced button to grant the Remote Control permission for the user/group.
0
 

Author Comment

by:Beta99
ID: 24878011
JdixonCCNA, I don't have any issue shadowing any sessions, it's the ability to do it w/o admin rights that's my problem.

henjoh09, I've tried it and gave the user full rights but still get an "access denied" error when attempting to shadow a session.



0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 125 total points
ID: 24878694
Modifying the permissions shall work, but changes in RDP-Tcp Properties doesn't affect current sessions makes the users to have to be logged of when doing the modification.
Just tested by myself to refresh my memory, and it doesn't work if the shadowed user is an administrator, propably caused by WIL (Windows Integrity Levels) restricting a process with lower authority token from accessing a process with higher authority token.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Case Summary: In this Article we introduce the new method to configure the default user profile using Automated profile copy with sysprep rather than the old ways such as the manual copy of a configured profile to default user profile Old meth…
On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question