Granting the ability to shadow without granting admin permissions

  • Thread starter Thread starter GT
  • Start date Start date
G

GT

Guest
Greetings.

Is there a way to grant a user the ability to shaodw another session without
granted local server admin rights to the user?

Thanks.
 
Re: Granting the ability to shadow without granting admin permissions

Yes. Give the user the appropriate rdp-tcp permissions.
The following KB article applies to 2003 as well.

243554 - Explanation of RDP-TCP Permissions in Windows 2000
http://support.microsoft.com/?kbid=243554
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep
2007 in microsoft.public.windows.terminal_services:

> Greetings.
>
> Is there a way to grant a user the ability to shaodw another
> session without granted local server admin rights to the user?
>
> Thanks.
 
Re: Granting the ability to shadow without granting admin permissi

Re: Granting the ability to shadow without granting admin permissi

This ability cannot be restricted to individuals can it.

So it is either on or off for everybody right?

Thanks.

"Vera Noest [MVP]" wrote:

> Yes. Give the user the appropriate rdp-tcp permissions.
> The following KB article applies to 2003 as well.
>
> 243554 - Explanation of RDP-TCP Permissions in Windows 2000
> http://support.microsoft.com/?kbid=243554
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep
> 2007 in microsoft.public.windows.terminal_services:
>
> > Greetings.
> >
> > Is there a way to grant a user the ability to shaodw another
> > session without granted local server admin rights to the user?
> >
> > Thanks.
>
 
Re: Granting the ability to shadow without granting admin permissi

Re: Granting the ability to shadow without granting admin permissi

It is possible to set this setting per user account. Just add the user
account you want to the RDP-Tcp permissions and follow the same KB article.

Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

"GT" <GT@discussions.microsoft.com> wrote in message
news:1280BC46-A4F5-4247-9B8E-160D69838F49@microsoft.com...
> This ability cannot be restricted to individuals can it.
>
> So it is either on or off for everybody right?
>
> Thanks.
>
> "Vera Noest [MVP]" wrote:
>
>> Yes. Give the user the appropriate rdp-tcp permissions.
>> The following KB article applies to 2003 as well.
>>
>> 243554 - Explanation of RDP-TCP Permissions in Windows 2000
>> http://support.microsoft.com/?kbid=243554
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep
>> 2007 in microsoft.public.windows.terminal_services:
>>
>> > Greetings.
>> >
>> > Is there a way to grant a user the ability to shaodw another
>> > session without granted local server admin rights to the user?
>> >
>> > Thanks.
>>
 
Re: Granting the ability to shadow without granting admin permissi

Re: Granting the ability to shadow without granting admin permissi

If your talking about restricting who they can shadow the answer is no.
You would need a 3rd party product like Citrix Presentation Server to
do something like that.

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

GT wrote:
> This ability cannot be restricted to individuals can it.
>
> So it is either on or off for everybody right?
>
> Thanks.
>
> "Vera Noest [MVP]" wrote:
>
>> Yes. Give the user the appropriate rdp-tcp permissions.
>> The following KB article applies to 2003 as well.
>>
>> 243554 - Explanation of RDP-TCP Permissions in Windows 2000
>> http://support.microsoft.com/?kbid=243554
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Server
>> TS troubleshooting: http://ts.veranoest.net
>> ___ please respond in newsgroup, NOT by private email ___
>>
>> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep
>> 2007 in microsoft.public.windows.terminal_services:
>>
>>> Greetings.
>>>
>>> Is there a way to grant a user the ability to shaodw another
>>> session without granted local server admin rights to the user?
>>>
>>> Thanks.
 
Re: Granting the ability to shadow without granting admin permissi

Re: Granting the ability to shadow without granting admin permissi

I see. Did not look "deep" enough.

Thanks for the points guys!

"Soo Kuan Teo [MSFT]" wrote:

> It is possible to set this setting per user account. Just add the user
> account you want to the RDP-Tcp permissions and follow the same KB article.
>
> Thanks
> Soo Kuan
>
>
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "GT" <GT@discussions.microsoft.com> wrote in message
> news:1280BC46-A4F5-4247-9B8E-160D69838F49@microsoft.com...
> > This ability cannot be restricted to individuals can it.
> >
> > So it is either on or off for everybody right?
> >
> > Thanks.
> >
> > "Vera Noest [MVP]" wrote:
> >
> >> Yes. Give the user the appropriate rdp-tcp permissions.
> >> The following KB article applies to 2003 as well.
> >>
> >> 243554 - Explanation of RDP-TCP Permissions in Windows 2000
> >> http://support.microsoft.com/?kbid=243554
> >> _________________________________________________________
> >> Vera Noest
> >> MCSE, CCEA, Microsoft MVP - Terminal Server
> >> TS troubleshooting: http://ts.veranoest.net
> >> ___ please respond in newsgroup, NOT by private email ___
> >>
> >> =?Utf-8?B?R1Q=?= <GT@discussions.microsoft.com> wrote on 12 sep
> >> 2007 in microsoft.public.windows.terminal_services:
> >>
> >> > Greetings.
> >> >
> >> > Is there a way to grant a user the ability to shaodw another
> >> > session without granted local server admin rights to the user?
> >> >
> >> > Thanks.
> >>
>
>
 
Back
Top