up vote 0 down vote favorite
1
share [g+] share [fb]

RDP server users allow remote control without user approval. Remotely controlling an active RDP session works great. Remotely controlling a logged-on but disconnected RDP session fails. Is there some registry trick to fix this?

link|improve this question
What version of Server are you running? – Chris S♦ Apr 16 '11 at 15:35
This occurred on Win2000, Win2003, and now Win2008R2, hence the tags. – rjt Apr 16 '11 at 16:05
1  
sgmoore, i am not trying to connect to a disconnected session, i am trying to remote control a disconnected session - subtle difference. – rjt Apr 16 '11 at 19:21
1  
@grawity, the difference is in authorization and credentials. Admins do not know employee passwords. When the rdp session is active, i can remotely control the RDP session without windows prompting for credentials. When, the session is disconnected, an admin can not take control of it. – rjt Apr 17 '11 at 14:39
1  
@rjt: True. But, while I would not suggest doing this in a corporate environment, it's possible to bypass the authorization - either by running tscon or tsadmin as "SYSTEM" account via psexec -si, or by assigning SeTcbPrivilege to yourself (stupid move). – grawity Apr 17 '11 at 15:21
show 5 more comments
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.