Granting the ability to shadow without granting admin permissions

[Guest GT]

Greetings.

 

Is there a way to grant a user the ability to shaodw another session without

granted local server admin rights to the user?

 

Thanks.

[Guest Vera Noest [MVP]]

Re: Granting the ability to shadow without granting admin permissions

 

Yes. Give the user the appropriate rdp-tcp permissions.

The following KB article applies to 2003 as well.

 

243554 - Explanation of RDP-TCP Permissions in Windows 2000

http://support.microsoft.com/?kbid=243554

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep

2007 in microsoft.public.windows.terminal_services:

> Greetings.

>

> Is there a way to grant a user the ability to shaodw another

> session without granted local server admin rights to the user?

>

> Thanks.

[Guest GT]

Re: Granting the ability to shadow without granting admin permissi

 

Re: Granting the ability to shadow without granting admin permissi

 

This ability cannot be restricted to individuals can it.

 

So it is either on or off for everybody right?

 

Thanks.

 

"Vera Noest [MVP]" wrote:

> Yes. Give the user the appropriate rdp-tcp permissions.

> The following KB article applies to 2003 as well.

>

> 243554 - Explanation of RDP-TCP Permissions in Windows 2000

> http://support.microsoft.com/?kbid=243554

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep

> 2007 in microsoft.public.windows.terminal_services:

>

> > Greetings.

> >

> > Is there a way to grant a user the ability to shaodw another

> > session without granted local server admin rights to the user?

> >

> > Thanks.

>

[Guest Soo Kuan Teo [MSFT]]

Re: Granting the ability to shadow without granting admin permissi

 

Re: Granting the ability to shadow without granting admin permissi

 

It is possible to set this setting per user account. Just add the user

account you want to the RDP-Tcp permissions and follow the same KB article.

 

Thanks

Soo Kuan

 

 

--

This posting is provided "AS IS" with no warranties, and confers no rights.

 

"GT" <GT@discussions.microsoft.com> wrote in message

news:1280BC46-A4F5-4247-9B8E-160D69838F49@microsoft.com...

> This ability cannot be restricted to individuals can it.

>

> So it is either on or off for everybody right?

>

> Thanks.

>

> "Vera Noest [MVP]" wrote:

>

>> Yes. Give the user the appropriate rdp-tcp permissions.

>> The following KB article applies to 2003 as well.

>>

>> 243554 - Explanation of RDP-TCP Permissions in Windows 2000

>> http://support.microsoft.com/?kbid=243554

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep

>> 2007 in microsoft.public.windows.terminal_services:

>>

>> > Greetings.

>> >

>> > Is there a way to grant a user the ability to shaodw another

>> > session without granted local server admin rights to the user?

>> >

>> > Thanks.

>>

[Guest Jeff Pitsch]

Re: Granting the ability to shadow without granting admin permissi

 

Re: Granting the ability to shadow without granting admin permissi

 

If your talking about restricting who they can shadow the answer is no.

You would need a 3rd party product like Citrix Presentation Server to

do something like that.

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

GT wrote:

> This ability cannot be restricted to individuals can it.

>

> So it is either on or off for everybody right?

>

> Thanks.

>

> "Vera Noest [MVP]" wrote:

>

>> Yes. Give the user the appropriate rdp-tcp permissions.

>> The following KB article applies to 2003 as well.

>>

>> 243554 - Explanation of RDP-TCP Permissions in Windows 2000

>> http://support.microsoft.com/?kbid=243554

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

>>

>> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep

>> 2007 in microsoft.public.windows.terminal_services:

>>

>>> Greetings.

>>>

>>> Is there a way to grant a user the ability to shaodw another

>>> session without granted local server admin rights to the user?

>>>

>>> Thanks.

[Guest GT]

Re: Granting the ability to shadow without granting admin permissi

 

Re: Granting the ability to shadow without granting admin permissi

 

I see. Did not look "deep" enough.

 

Thanks for the points guys!

 

"Soo Kuan Teo [MSFT]" wrote:

> It is possible to set this setting per user account. Just add the user

> account you want to the RDP-Tcp permissions and follow the same KB article.

>

> Thanks

> Soo Kuan

>

>

> --

> This posting is provided "AS IS" with no warranties, and confers no rights.

>

> "GT" <GT@discussions.microsoft.com> wrote in message

> news:1280BC46-A4F5-4247-9B8E-160D69838F49@microsoft.com...

> > This ability cannot be restricted to individuals can it.

> >

> > So it is either on or off for everybody right?

> >

> > Thanks.

> >

> > "Vera Noest [MVP]" wrote:

> >

> >> Yes. Give the user the appropriate rdp-tcp permissions.

> >> The following KB article applies to 2003 as well.

> >>

> >> 243554 - Explanation of RDP-TCP Permissions in Windows 2000

> >> http://support.microsoft.com/?kbid=243554

> >> _________________________________________________________

> >> Vera Noest

> >> MCSE, CCEA, Microsoft MVP - Terminal Server

> >> TS troubleshooting: http://ts.veranoest.net

> >> ___ please respond in newsgroup, NOT by private email ___

> >>

> >> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep

> >> 2007 in microsoft.public.windows.terminal_services:

> >>

> >> > Greetings.

> >> >

> >> > Is there a way to grant a user the ability to shaodw another

> >> > session without granted local server admin rights to the user?

> >> >

> >> > Thanks.

> >>

>

>