Export (0) Print
Expand All

Remote Desktop Services permissions

You can use the permissions provided for Remote Desktop Services to control how users and groups access the server. For a description of the default permission types and more detailed information about Remote Desktop Services permissions in general, see the documentation that accompanies the Remote Desktop Services Configuration administrative tool.

Following is a list of the permissions that you can set and the tasks the permissions allow.

ValueMeaning

Query Information

Query sessions and servers for information.

Set Information

Configure connection properties.

Remote Control

View or actively control another user's session.

Logon

Log on to a session on the server.

Logoff

Log off a user from a session. Be aware that logging off a user without warning can result in loss of data at the client.

Message

Send a message to another user's sessions.

Connect

Connect to another session.

Disconnect

Disconnect a session.

Virtual Channels

Use virtual channels. Be aware that turning off virtual channels disables some Remote Desktop Services features such as clipboard and printer redirection.

Reset

End a session. Be aware that ending a session without warning can result in loss of data at the client.

Windows Server 2003:  You cannot set this permission.

 

The Logon permission is required for a user to log on to a new Remote Desktop Services session. All other Remote Desktop Services permissions apply to controlling another user's Remote Desktop Services session.

Remote Desktop Services permissions can be granted, or set, for individual users or groups. Users can also inherit permissions as a result of being a group member. The denial of a permission, however, overrides an inherited permission. For example, members of the Remote Desktop Users (RDU) group are granted the Query permission by default. If an Administrator sets the Query permission to "Deny" for that user, the user will not be able to query another user's session. After a user logs on to a session, the user is granted all other Remote Desktop Services permissions for his or her session.

 

 

Show:
© 2014 Microsoft