Prevent currently logged on user from denying remote desktop access to admin

Prevent currently logged on user from denying remote desktop access to admin

Post by Pete » Sun, 12 Sep 2004 01:04:39


Is there a way - reg tweak, group policy setting - to
prevent a user (not admin) who is currently logged on to
a WinXP SP2 machine from denying remote desktop access to
an administrator? From KB 280828:

The user currently logged on to the remote computer will
receive the following error message:
<Domain or Computer Name>\<username> is trying to connect
to this computer. If you allow, you will be disconnected,
but you can resume later. Do you want to allow this
connection?
If the user clicks No, the remote user will get the
message:
<Domain or Computer Name>\<username> is currently logged
on this computer, and did not allow you to connect.

It seems unreasonable to me that a user can prevent an
admin from logging on to the machine. There's gotta be a
solution -- I've looked and found nothing.

Anyone?

Thanks!
 
 
 

Prevent currently logged on user from denying remote desktop access to admin

Post by Bill Sande » Sun, 12 Sep 2004 08:22:19

Submit an MSWISH?
http://www.yqcomputer.com/

 
 
 

Prevent currently logged on user from denying remote desktop access to admin

Post by anonymou » Sun, 12 Sep 2004 08:34:36

Thanks Bill, I did just that. Also, I configured the
following setting in the Group Policy:

User Configuration\Administrative Templates\Windows
Components\Terminal Services\"Sets rules for remote
control of Terminal Services user sessions" to Enabled:
Full control without user's permission.

I don't know if that will do the trick (I can't terminal
myself with my current setup) but if I find I've nailed
it I'll post back.

Thanks again.

message

to
to
will
connect
disconnected,
logged
a
 
 
 

Prevent currently logged on user from denying remote desktop access to admin

Post by anonymou » Fri, 17 Sep 2004 05:46:55

Well that sure didn't work: the currently logged on user
(non-admin) can still prevent an admin from logging on
even with that group policy setting enabled. Bummer.


access
be
 
 
 

Prevent currently logged on user from denying remote desktop access to admin

Post by Bill Sande » Fri, 17 Sep 2004 12:10:08

Yeah--I don't think there is a good solution for this one at the moment.
At least I haven't heard anyone saying they had one!
 
 
 

Prevent currently logged on user from denying remote desktop access to admin

Post by MV » Sat, 18 Sep 2004 13:11:33

Disable Fast User Switching... Then it takes an admin to override a
user login...

On Wed, 15 Sep 2004 23:10:08 -0400, "Bill Sanderson"