Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

RDP server users allow remote control without user approval. Remotely controlling an active RDP session works great. Remotely controlling a logged-on but disconnected RDP session fails. Is there some registry trick to fix this?

share|improve this question
    
What version of Server are you running? –  Chris S Apr 16 '11 at 15:35
    
This occurred on Win2000, Win2003, and now Win2008R2, hence the tags. –  rjt Apr 16 '11 at 16:05
1  
sgmoore, i am not trying to connect to a disconnected session, i am trying to remote control a disconnected session - subtle difference. –  rjt Apr 16 '11 at 19:21
1  
@grawity, the difference is in authorization and credentials. Admins do not know employee passwords. When the rdp session is active, i can remotely control the RDP session without windows prompting for credentials. When, the session is disconnected, an admin can not take control of it. –  rjt Apr 17 '11 at 14:39
1  
@rjt: True. But, while I would not suggest doing this in a corporate environment, it's possible to bypass the authorization - either by running tscon or tsadmin as "SYSTEM" account via psexec -si, or by assigning SeTcbPrivilege to yourself (stupid move). –  grawity Apr 17 '11 at 15:21
show 5 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.