Solved

How do I delegate access to manage activer users on RDS Servers?

Posted on 2014-01-03
6
1,101 Views
Last Modified: 2014-01-11
I would like to delegate permissions to a user who can manage active users using RDP. This will be on a Server 2008 AD using Terminal Sevices.
0
Comment
Question by:Bills122
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:Coralon
ID: 39755599
The easiest way to accomplish this is to create a security group for them, and apply security to the RDP listeners on your machine.  You can assign specific rights such as logoff, reset etc.  

Coralon
0
 

Author Comment

by:Bills122
ID: 39756438
Thank you for the reply and this does sound like what I need to do. I am pretty new at this. I was wondering if you could be a little more specific? When you say create a security group for them do you mean the RDP users?  How do I then delegate someone to mange this then? I do not recall seeing anywhere in security permissions that allows for log reset etc? Thanks for trying to help me.
0
 
LVL 25

Accepted Solution

by:
Coralon earned 300 total points
ID: 39756652
You would create a security group that you plan to assign the management permissions to the RDP listener.  It literally has nothing to do with the end users themselves, just the ones you are delegating to.  

There is an mmc snapin to manage the listeners themselves (RDP, ICA).  When you look at the properties of the RDP listener, the security tab is where you would assign those permissions.   The security tab has several permissions - Logon, Logoff, Reset, Shadow, etc.

Coralon
0
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

 

Author Comment

by:Bills122
ID: 39762652
Coralon;

  I have created my security Group and added the user that I want to be able to manage the RDP users.

  I am hung up on the rdp listener. What is the snapin called that I need to install? On the server I have Remote Desktop Services installed which has the Remote Desktop Services Manager and I do not see what you are talking about. Can you please provide more guidance?
Thank you
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39764141
Sure.. it used to be called tscc.msc (terminal services configuration console).  

But, this is from a current article on the subject:
To verify Remote Desktop Services RDP-Tcp properties

Depending on the version of your operating system, please follow the steps below:

Setting via Remote Desktop Services Configuration

To configure the number of simultaneous remote connections allowed for a connection

On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services.
Under Connections, right-click the name of the connection, and then click Properties.

Once you get to that point, there will be a security tab that you use to assign the permissions to.  I'd put in screenshot, but I'm at home.  

Coralon
0
 

Author Closing Comment

by:Bills122
ID: 39774288
Great Information after doing some further research was able to understand what you meant. Could have had more details and been more specific.

Thanks
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question