Enable Remote Desktop via group policy

[Guest Joe Murphy]

I know that I can enable this throughout our organization using group

policy, but what I want to be sure of is that the end-user has control over

whether or not to allow the remote desktop session.

 

I want to avoid any IT "big brother" perception. They already think we sit

around reading their emails. ;)

 

Thanks,

JM

[Guest Jeff Pitsch]

Re: Enable Remote Desktop via group policy

 

Do you mean shadowing? Simply have the shadow options set to prompt the

user.

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

Joe Murphy wrote:

> I know that I can enable this throughout our organization using group

> policy, but what I want to be sure of is that the end-user has control over

> whether or not to allow the remote desktop session.

>

> I want to avoid any IT "big brother" perception. They already think we sit

> around reading their emails. ;)

>

> Thanks,

> JM

>

>

[Guest Joe Murphy]

Re: Enable Remote Desktop via group policy

 

Not shadowing (at least I don't think so). I mean when a user calls me for

help and I want to remotely control their desktop. I'd like them to get a

prompt when I try to establish the remote session so they don't freak out,

like some users do.

 

Thanks,

JM

 

"Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message

news:%23Ugm7Z5$HHA.5868@TK2MSFTNGP05.phx.gbl...

> Do you mean shadowing? Simply have the shadow options set to prompt the

> user.

>

> Jeff Pitsch

> Microsoft MVP - Terminal Server

> Citrix Technology Professional

> Provision Networks VIP

>

> Forums not enough?

> Get support from the experts at your business

> http://jeffpitschconsulting.com

>

> Joe Murphy wrote:

>> I know that I can enable this throughout our organization using group

>> policy, but what I want to be sure of is that the end-user has control

>> over whether or not to allow the remote desktop session.

>>

>> I want to avoid any IT "big brother" perception. They already think we

>> sit around reading their emails. ;)

>>

>> Thanks,

>> JM

[Guest Vera Noest [MVP]]

Re: Enable Remote Desktop via group policy

 

Do you mean Remote Assistance? So that you and the user see and can

interact with the same screen at the same time? That can be

configured so that the user must initiate it (invite you to give

Remote Assistance, and allow you to connect).

 

Or do you mean that you rdp into the client? Thereby effectively

logging out and shutting out the users? I wouldn't do that when

they call you, meaning they are present in front of their

workstation. Remote Assistance is ideal for this. You can teach the

user while you fix the problem, and they can see what you do.

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"Joe Murphy" <spam@spamthis.com> wrote on 25 sep 2007 in

microsoft.public.windows.terminal_services:

> Not shadowing (at least I don't think so). I mean when a user

> calls me for help and I want to remotely control their desktop.

> I'd like them to get a prompt when I try to establish the remote

> session so they don't freak out, like some users do.

>

> Thanks,

> JM

>

> "Jeff Pitsch" <Jeff@Jeffpitschconsulting.com> wrote in message

> news:%23Ugm7Z5$HHA.5868@TK2MSFTNGP05.phx.gbl...

>> Do you mean shadowing? Simply have the shadow options set to

>> prompt the user.

>>

>> Jeff Pitsch

>> Microsoft MVP - Terminal Server

>> Citrix Technology Professional

>> Provision Networks VIP

>>

>> Forums not enough?

>> Get support from the experts at your business

>> http://jeffpitschconsulting.com

>>

>> Joe Murphy wrote:

>>> I know that I can enable this throughout our organization

>>> using group policy, but what I want to be sure of is that the

>>> end-user has control over whether or not to allow the remote

>>> desktop session.

>>>

>>> I want to avoid any IT "big brother" perception. They already

>>> think we sit around reading their emails. ;)

>>>

>>> Thanks,

>>> JM

[Guest TP]

Re: Enable Remote Desktop via group policy

 

Yes, you are talking about shadowing aka Remote Control.

 

Jeff's comment is correct--you can set the prompt option. I

have never used it for XP connections so I am not certain it

will work for them. By default it prompts the user so if you

have not set it already there is no need.

 

Note that with XP Pro SP2 you need to add the following

registry entry to each machine to do what you want:

 

HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server

 

AllowRemoteRPC REG_DWORD 0x00000001

 

-TP

 

Joe Murphy wrote:

> Not shadowing (at least I don't think so). I mean when a user calls

> me for help and I want to remotely control their desktop. I'd like

> them to get a prompt when I try to establish the remote session so

> they don't freak out, like some users do.

>

> Thanks,

> JM

[Guest TP]

Re: Enable Remote Desktop via group policy

 

http://ts.veranoest.net/ts_faq_administration.htm#XPSP2remote

 

:-)

 

Vera Noest [MVP] wrote:

> Do you mean Remote Assistance? So that you and the user see and can

> interact with the same screen at the same time? That can be

> configured so that the user must initiate it (invite you to give

> Remote Assistance, and allow you to connect).

>

> Or do you mean that you rdp into the client? Thereby effectively

> logging out and shutting out the users? I wouldn't do that when

> they call you, meaning they are present in front of their

> workstation. Remote Assistance is ideal for this. You can teach the

> user while you fix the problem, and they can see what you do.

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

[Guest Vera Noest [MVP]]

Re: Enable Remote Desktop via group policy

 

LOL!

But I actually thought that the OP was possibly referring to Remote

Assistance, i.e. interacting with the users *XP* desktop session,

not just the users *TS* desktop session.

Our helpdesk uses Remote Assistance all the time, since we run a

mixture of local applications and TS applications.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

"TP" <tperson.knowspamn@mailandnews.com> wrote on 25 sep 2007 in

microsoft.public.windows.terminal_services:

> http://ts.veranoest.net/ts_faq_administration.htm#XPSP2remote

>

>:-)

>

> Vera Noest [MVP] wrote:

>> Do you mean Remote Assistance? So that you and the user see and

>> can interact with the same screen at the same time? That can be

>> configured so that the user must initiate it (invite you to

>> give Remote Assistance, and allow you to connect).

>>

>> Or do you mean that you rdp into the client? Thereby

>> effectively logging out and shutting out the users? I wouldn't

>> do that when they call you, meaning they are present in front

>> of their workstation. Remote Assistance is ideal for this. You

>> can teach the user while you fix the problem, and they can see

>> what you do.

>>

>> _________________________________________________________

>> Vera Noest

>> MCSE, CCEA, Microsoft MVP - Terminal Server

>> TS troubleshooting: http://ts.veranoest.net

>> ___ please respond in newsgroup, NOT by private email ___

[Guest TP]

Re: Enable Remote Desktop via group policy

 

That's what is so nice about it--you can have your XP machines

listed in your tsadmin favorites just like your servers. When you

need to offer assistance you can right-click on the user's name

and choose Remote Control. Another nice thing is you can see

the list of processes the user has running.

 

If the user clicks yes you are connected to their XP desktop just

like PC Anywhere, VNC, etc.

 

-TP

 

Vera Noest [MVP] wrote:

> LOL!

> But I actually thought that the OP was possibly referring to Remote

> Assistance, i.e. interacting with the users *XP* desktop session,

> not just the users *TS* desktop session.

> Our helpdesk uses Remote Assistance all the time, since we run a

> mixture of local applications and TS applications.

>

[Guest Vera Noest [MVP]]

Re: Enable Remote Desktop via group policy

 

You're kidding :-) I've never done that, will try it out!

Our helpdesk always uses Help and Support from the Start menu to

offer Remote Assistance, but this sounds easier!

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

*----------- Please reply in newsgroup -------------*

 

"TP" <tperson.knowspamn@mailandnews.com> wrote on 25 sep 2007:

> That's what is so nice about it--you can have your XP machines

> listed in your tsadmin favorites just like your servers. When

> you need to offer assistance you can right-click on the user's

> name and choose Remote Control. Another nice thing is you can

> see the list of processes the user has running.

>

> If the user clicks yes you are connected to their XP desktop

> just like PC Anywhere, VNC, etc.

>

> -TP

>

> Vera Noest [MVP] wrote:

>> LOL!

>> But I actually thought that the OP was possibly referring to

>> Remote Assistance, i.e. interacting with the users *XP* desktop

>> session, not just the users *TS* desktop session.

>> Our helpdesk uses Remote Assistance all the time, since we run

>> a mixture of local applications and TS applications.