Solved

How do I delegate access to manage activer users on RDS Servers?

Posted on 2014-01-03
6
1,031 Views
Last Modified: 2014-01-11
I would like to delegate permissions to a user who can manage active users using RDP. This will be on a Server 2008 AD using Terminal Sevices.
0
Comment
Question by:Bills122
  • 3
  • 3
6 Comments
 
LVL 23

Expert Comment

by:Coralon
Comment Utility
The easiest way to accomplish this is to create a security group for them, and apply security to the RDP listeners on your machine.  You can assign specific rights such as logoff, reset etc.  

Coralon
0
 

Author Comment

by:Bills122
Comment Utility
Thank you for the reply and this does sound like what I need to do. I am pretty new at this. I was wondering if you could be a little more specific? When you say create a security group for them do you mean the RDP users?  How do I then delegate someone to mange this then? I do not recall seeing anywhere in security permissions that allows for log reset etc? Thanks for trying to help me.
0
 
LVL 23

Accepted Solution

by:
Coralon earned 300 total points
Comment Utility
You would create a security group that you plan to assign the management permissions to the RDP listener.  It literally has nothing to do with the end users themselves, just the ones you are delegating to.  

There is an mmc snapin to manage the listeners themselves (RDP, ICA).  When you look at the properties of the RDP listener, the security tab is where you would assign those permissions.   The security tab has several permissions - Logon, Logoff, Reset, Shadow, etc.

Coralon
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:Bills122
Comment Utility
Coralon;

  I have created my security Group and added the user that I want to be able to manage the RDP users.

  I am hung up on the rdp listener. What is the snapin called that I need to install? On the server I have Remote Desktop Services installed which has the Remote Desktop Services Manager and I do not see what you are talking about. Can you please provide more guidance?
Thank you
0
 
LVL 23

Expert Comment

by:Coralon
Comment Utility
Sure.. it used to be called tscc.msc (terminal services configuration console).  

But, this is from a current article on the subject:
To verify Remote Desktop Services RDP-Tcp properties

Depending on the version of your operating system, please follow the steps below:

Setting via Remote Desktop Services Configuration

To configure the number of simultaneous remote connections allowed for a connection

On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services.
Under Connections, right-click the name of the connection, and then click Properties.

Once you get to that point, there will be a security tab that you use to assign the permissions to.  I'd put in screenshot, but I'm at home.  

Coralon
0
 

Author Closing Comment

by:Bills122
Comment Utility
Great Information after doing some further research was able to understand what you meant. Could have had more details and been more specific.

Thanks
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now