SCCM Remote Control

Posted on 2012-08-21
Last Modified: 2012-08-22
Is there any way to keep SCCM from using terminal services if no one is logged into a machine or it is locked? Thanks!
Question by:jbyrd1981
    LVL 11

    Accepted Solution

    No, this is not possible. This is by design:
    In essence the initial story was that this is no longer allowed as it is a security risk.If you login with admin credentials and the connection is broken for whatever reason the user is left with an admin session at his disposal.So only 2 scenarios were left implemented1) You need to assist a user in performing a task, hence the user needs to see what you are doing, and you are doing it using his credentials. -> use remte Assistance or remote tools2) You need to perform an admin task on a machine, so from a security perspective the user shouldn't be able to intervent -> use remote desktop.The scenario you are talking about was deprecated from a security perspective, yet opens up one scenario where a user has locked his machine and has unsaved data for which no good solution is available, as when you use remote desktop here the user will lose data.
    LVL 1

    Author Comment

    One problem is that it would seem that when I work using terminal services and work an issue... I can come back to the machine and it has logged me off the session leaving me to start my work over again. This is a real pain! Where did you find this info?
    LVL 11

    Expert Comment

    Here is the link.
    LVL 1

    Author Closing Comment

    That is too bad... Would not have hurt to leave the option available and let the organization decide to turn off. Thanks For the info!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
    If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now