This post is more than 5 years old
33 Posts
0
5496
November 23rd, 2010 10:00
How do i allow a user group to use remote control?
Hi,
New to vWorkspace i'm trying to allow application specialists to help users by using remote control.
I've created groups in Active Directory
Added these groups in the Administration section, default everything to deny.
right click a terminal server, properties, permissions and select the created group
mark allow for Remote control user sessions and Send message to users.
members of the group can now open the console and view everything (which is not very helpful)
they can browse to the terminal server, select the users tab, select the user, right click and select remote control
or send message.
However, this ends in an error: "Session om computer [name] could not be remote-controlled. (Result=0)"
or when sending a message: "Method '~' of object '~' failed (-2147467259)"
An administrator can remotely control that same session fine. So it must be some permission somewhere.
Can anybody point me in the right direction?
TIA
Paul
paulh21
33 Posts
1
November 24th, 2010 10:00
Found it!
on the terminal server, go to Administrative tools\Terminal Services\Terminal services configuration
right click RDP-TCP, choose properties
goto security tab
click add and add your remote control AD group
click Advanced, select the group en click edit
assuming this group also has memebership of remote desktop users only select (allow) Remote control
now to try and put this in a group policy...
Shame i cant award credits to myself
O no wait, i can
Michel Roth
173 Posts
0
November 24th, 2010 14:00
Thanks for sharing Paul. Do you know you can also delegate control to shadow on a vWorkspace level in the management console?
DELL-Jon Ro
1 Rookie
•
64 Posts
0
November 24th, 2010 21:00
Make sure you use a Global Security Group in AD, not a local one! That's a common mistake when setting up which users are allowed with vWorkspace. Of course, if you provision a virtual desktop with vWorkspace, we take care of that for you!
paulh21
33 Posts
0
November 25th, 2010 05:00
Thats what i started with, but you still need to tell windows that users are allowed to do so as well.
Isn't what i described at the start setting delegation? Is there an other way?
Our customer rejected this solution because you get to view the entire console. Is there a way to present the console to a group of users with only the terminal servers node visable?