How to give User rights to log off RDP Users?

January 24, 2010 at 18:14:34
Specs: Windows Server 2003
I do some minor administration on a server through Remote Desktop, and need to grant another user access rights to log off or disconnect RDP sessions without making them a full Administrator.

If you open Administrator Tools/Local Security Settings, under Local Policies/User Rights Assignment and Security Options, there's a long list of different security settings, but I can't find this specific task in there.

Any help would be appreciated, thanks.

See More: How to give User rights to log off RDP Users?

Report •

January 25, 2010 at 07:57:09

Report •

January 25, 2010 at 08:23:04
"Logs off a user from a session and deletes the session from the server. You can always log off from the session to which you are currently logged on. You must, however, have Full Control permission to log off users from other sessions."

Report •

January 25, 2010 at 08:30:14

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Managing permissions on connections

Permissions define how users and groups can access a terminal server, allowing you to secure the server. Terminal Services permissions can be handled easily on a per-computer basis, using the Remote Desktop Users user group and the RemoteInteractiveLogon right. In some cases, however, it might be necessary to manage permissions on a per-connection basis.

Default Remote Desktop AC is set to "User Access"

Find the user you want to give permission to and set him/her to "full control"... it's the only way as far as I can tell.

Full control is a lot of power on a terminal server.

Report •

Related Solutions

January 25, 2010 at 15:08:58
You don't have to give them full control to disconnect a session. And there is a difference between Full Control TS access and being an administrator of a server.

In order to be able to disconnect another users session, you need to give the 'Disconnect' special permission to the account you want to be able to disconnect other session.

You do it in the Terminal Services Configuration section of the TS.

Report •

Ask Question