Solved

How to enable session shadowing for non local admin users

Posted on 2009-07-16
5
853 Views
Last Modified: 2013-11-21
Without adding the account to the local admin group, is there a way to enable that account to shadow other session in windows terminal server?

PS: I have already enable the remote session in the account property in AD and also added the account in the permission tab under the listener property.

Thanks.
0
Comment
Question by:Beta99
  • 2
  • 2
5 Comments
 

Expert Comment

by:JdixonCCNA
ID: 24872972
Try the following link...

http://support.microsoft.com/kb/278845
0
 

Expert Comment

by:JdixonCCNA
ID: 24873037
If you want to shadow the session without requiring the session owners permission, i.e. no prompt to accept the shadow on the users session, uncheck the require users permission checkbox in the RDP/TCP settings under Start-Programs-AdministrativeTools-Terminal Services Configuration.
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 24874681
Start the Terminal Services Configuration MMC
Double-click RDP/Tcp, and in the dialog select Security tab to modify the RDP-permisions. Use the Advanced button to grant the Remote Control permission for the user/group.
0
 

Author Comment

by:Beta99
ID: 24878011
JdixonCCNA, I don't have any issue shadowing any sessions, it's the ability to do it w/o admin rights that's my problem.

henjoh09, I've tried it and gave the user full rights but still get an "access denied" error when attempting to shadow a session.



0
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 125 total points
ID: 24878694
Modifying the permissions shall work, but changes in RDP-Tcp Properties doesn't affect current sessions makes the users to have to be logged of when doing the modification.
Just tested by myself to refresh my memory, and it doesn't work if the shadowed user is an administrator, propably caused by WIL (Windows Integrity Levels) restricting a process with lower authority token from accessing a process with higher authority token.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Remote Desktop Protocol or RDP has become an essential tool in many offices. This article will show you how to set up an external IP to point directly to an RDP session. There are many reasons why this is beneficial but perhaps the top reason is con…
My previous article  (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html)detailed one possible method to get SCCM 2007 installed an…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question