?
Solved

How do I delegate access to manage activer users on RDS Servers?

Posted on 2014-01-03
6
Medium Priority
?
1,282 Views
Last Modified: 2014-01-11
I would like to delegate permissions to a user who can manage active users using RDP. This will be on a Server 2008 AD using Terminal Sevices.
0
Comment
Question by:Bills122
  • 3
  • 3
6 Comments
 
LVL 25

Expert Comment

by:Coralon
ID: 39755599
The easiest way to accomplish this is to create a security group for them, and apply security to the RDP listeners on your machine.  You can assign specific rights such as logoff, reset etc.  

Coralon
0
 

Author Comment

by:Bills122
ID: 39756438
Thank you for the reply and this does sound like what I need to do. I am pretty new at this. I was wondering if you could be a little more specific? When you say create a security group for them do you mean the RDP users?  How do I then delegate someone to mange this then? I do not recall seeing anywhere in security permissions that allows for log reset etc? Thanks for trying to help me.
0
 
LVL 25

Accepted Solution

by:
Coralon earned 900 total points
ID: 39756652
You would create a security group that you plan to assign the management permissions to the RDP listener.  It literally has nothing to do with the end users themselves, just the ones you are delegating to.  

There is an mmc snapin to manage the listeners themselves (RDP, ICA).  When you look at the properties of the RDP listener, the security tab is where you would assign those permissions.   The security tab has several permissions - Logon, Logoff, Reset, Shadow, etc.

Coralon
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:Bills122
ID: 39762652
Coralon;

  I have created my security Group and added the user that I want to be able to manage the RDP users.

  I am hung up on the rdp listener. What is the snapin called that I need to install? On the server I have Remote Desktop Services installed which has the Remote Desktop Services Manager and I do not see what you are talking about. Can you please provide more guidance?
Thank you
0
 
LVL 25

Expert Comment

by:Coralon
ID: 39764141
Sure.. it used to be called tscc.msc (terminal services configuration console).  

But, this is from a current article on the subject:
To verify Remote Desktop Services RDP-Tcp properties

Depending on the version of your operating system, please follow the steps below:

Setting via Remote Desktop Services Configuration

To configure the number of simultaneous remote connections allowed for a connection

On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services.
Under Connections, right-click the name of the connection, and then click Properties.

Once you get to that point, there will be a security tab that you use to assign the permissions to.  I'd put in screenshot, but I'm at home.  

Coralon
0
 

Author Closing Comment

by:Bills122
ID: 39774288
Great Information after doing some further research was able to understand what you meant. Could have had more details and been more specific.

Thanks
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question