Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to allow a user access to tsadmin, but only to remote in on certain users? For example: The user is mgr of our billing department and has 3 team members in remote locations. I would like for her to be able to remote in the team member's sessions but no one else. Is this possible?

share|improve this question
Sorry I haven't used this site in a very long time. – Daniel Jul 19 '12 at 18:38
up vote 2 down vote accepted

There isn't granularity in the access control system to do what you're looking for in a way that would be configurable very easily.

Permission to perform "Remote Control" is granted based on permissions set on the "RDP Listener" object. You could create an RDP Listener with permissions as you describe (allowing "Remote Control" for certain groups) but, as far as I know, you would need to have one NIC per listener that you create (because multiple listeners can't be bound to the same NIC). It might be possible to have multiple listeners on the same NIC running on different TCP port numbers I'm not seeing a way in the stock user interface to do that.

share|improve this answer
Great answer! I was thinking this wouldn't be possible. I think I will train the users on using for screen sharing. Thanks for your time and the helpful answer. – Daniel Jul 20 '12 at 13:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.