Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a public facing Remote Desktop Server that is used to demo our software to clients. We are upgrading to new hardware and new network layout.

On our old server I set it so a special group could shadow other users without being a administrator. This was set so sales staff could join desktop session on the server with the clients to demo the software without giving sales administrative privileges on the server.

In on the new system we will be having multiple servers set up in a domain and I need to do the same thing again, however after searching for several hours I still can not find where that setting was that was set on the original server.

Where is the list of users/groups that have privileges to shadow other users set?

(note I am NOT looking for the GPO setting under Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Set rules for remote control of Remote Desktop Services user sessions, I need the other side of that coin of who gets to connect to those sessions that have the above setting enabled)

share|improve this question
up vote 4 down vote accepted

You can set this on the Permissions tab of the RDP protocol component on the RDS server. Add the group/user to the permissions with the Allow permission for everything. This should allow the group/user to shadow a user session without the group/user needing Administrative rights to the RDS server.

share|improve this answer
Ah ha!, thank you, that was the location I could not find. – Scott Chamberlain Jun 2 '12 at 20:34
Glad to help... – joeqwerty Jun 2 '12 at 21:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.