6

I need to limit 1 machine's RDP capabilities to only allow the console session(much as the windows client behaviour). It is a windows server 2003 R2 std.

As far as I know I can limit the number of sessions(Active) in server 2003 rdp config. But no option to only allow console sessions.

Anyone got any britght ideas? Id rather not install xp/vista/win7 on this server. VNC is not an option.

Cheers

2
  • Are you saying you want to allow RDP access, but only with the console (/admin) switch?
    – Sam Cogan
    Jan 25, 2010 at 14:01
  • That is correct!
    – MrTimpi
    Jan 25, 2010 at 14:18

2 Answers 2

2

poor solution: make a login script. If the connection is not console, logoff:

logoff 1

This will logoff session 1. If you are connecting in rdp through the console, you are session 0 and not 1

you can detect better using qwinsta and a script to check output of it.

4
  • Well, your "poor solution" is actually the first solution ive got this far:) 1 point for that. Im still looking for something more exiting if you guys got any brigt ideas.
    – MrTimpi
    Feb 4, 2010 at 22:21
  • 2 poor others way to consolidate through GPO: Restrict Terminal Services users to a single remote session Limit number of connections (set it to 1) (computer \ Administrative Templates \ Windows Components \ Terminal Services) I am afraid you won't have better. If others admin respect the logon script that do the logoff, it should be ok. Feb 5, 2010 at 7:37
  • To restrict TS to 1 session, only restricts to active sessions and does not care if its console or not. Your still able to logon to multiple sessions just not at the same time.
    – MrTimpi
    Feb 8, 2010 at 7:14
  • That's why i named them "poor". It just add more restriction, to get closer to your objective, without being the true answer. The best way i found is the logon script that logoff when you are not in console Feb 8, 2010 at 8:12
0

Do you actually need to see how the remote computer draws the console wrapper, or do you need a console-only access?

If it's the latter, consider using SSH - both OpenSSH and DropBear should be able to run on WS 2003; you're only transmitting the characters, not a part of the screen, plus the connection is encrypted.

1
  • 1
    I need the GUI console session of the RDP for a crappy app that feeds our backoffice system, no other method is supported by the vendor:/. So just Shell access is of no use, thx anyways:)
    – MrTimpi
    Feb 4, 2010 at 22:19

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .