Solved

Is there a way to give right to Remote Control other user session on Terminal Server to the user without Admin rights?

Posted on 2015-01-05
2
295 Views
Last Modified: 2015-01-05
We have a Terminal Server - one of the users (accountant) needs to train other users on some features of the software.

Is there a way to give this user right to Remote Control other user session without giving him Admin rights?
0
Comment
Question by:pyotrek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 17

Accepted Solution

by:
Spike99 earned 500 total points
ID: 40532268
You can use the Terminal Services configuration manager to fine tune access to user sessions.

At the run line just type in tsconfig.msc (I don't think that works in server 2012, though). Then, view the properties of the RDP-TCP connection.  Under the permissions or security tab, you should be able to grant users or groups access to perform certain tasks like remote control sessions, end sessions, etc.

This page has a description of the different permissions you can add:
http://technet.microsoft.com/en-us/library/cc753032.aspx

They need to have "query" and "remote control" rights at minimum to find & shadow users.  You could make a shortcut for the TSAdmin & put it somewhere the accountant would see it.  I believe the paths to TSADmin in server 2003 & 2008 are:
C:\WINDOWS\system32\tsadmin.exe for Server 2003
C:\WINDOWS\system32\tsadmin.msc for Server 2008

Note that any sessions that are active when you make this change will not be effected by the change:  that accountant wouldn't be able to shadow any of the users on the server until they have logged off & back on.  It would also be best to create a group to manage those permissions. Even if there's only 1 user in the group, if that person ever leaves, you just need to add the new person to that group to give him or her the same rights.

If you have a server 2012 terminal server, you'd have to use the RDS Management tools instead of TSConfig.

If the accountant is going to shadow users from his PC & not from the TS, you'd have to install the remote management tools for his OS.  

Here's the one for Windows 8:
http://www.microsoft.com/en-us/download/details.aspx?id=28972

Windows 8.1:
http://www.microsoft.com/en-us/download/details.aspx?id=39296

Windows 7 (for managing Server 2003 & 2008 machines):
http://www.microsoft.com/en-us/download/details.aspx?id=7887
0
 
LVL 1

Author Closing Comment

by:pyotrek
ID: 40532431
Thank you
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Suggested Courses

632 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question