Lock down Admin Console and remote tools

Tue, 23 Jun 2009 13:08:29 Z

Hi Guys

I would like to achieve the following but I am not sure how:

1. I would like to allow certain administrators that are apart of a certain security group access to use remote tools and more specifically remote desktop to connect to users computers. I have installed the consoles and everything is fine. But I would like to lock down the consoles some how so that they can only see the collections option in there consoles and nothing else. At the moment they can see everything.

Is this possible? any help would be greatly appreciated.

2. Also, is there anyway that instead of logging the user out when using remote desktop that the administrator can just carry on from the current users session?

Thanks so much guys.

Lock down Admin Console and remote tools

Tue, 23 Jun 2009 13:26:15 Z

Hi,

1) You can configure security in Config Mgr. on almost each object in the console. You can also create a custom console that only show the collections

2) Remote desktop is not the tool you want to use for that, in stead use Remote assitance or the SMS remote tools.

Kent Agerlund | http://agerlund.spaces.live.com/blog/

Lock down Admin Console and remote tools

Tue, 23 Jun 2009 13:44:40 Z

Hi Kent

Thanks. answer 2 totally solves my problem there.

As for question 1 again. I have looked in the objects and cannot find which object it would be. There isnt really a remote tools object.

Lock down Admin Console and remote tools

Tue, 23 Jun 2009 13:45:36 Z

Sorry,

Would i maybe have to set the group permissions on the Collection class, All instances, read and use remote tools options?

Lock down Admin Console and remote tools

Tue, 23 Jun 2009 15:04:58 Z

Yes, you configure it on the Collection object. Also configure the permissions in the properties of the remote tools client agent.

Kent Agerlund | http://agerlund.spaces.live.com/blog/

Lock down Admin Console and remote tools

Wed, 24 Jun 2009 07:39:10 Z

You can find a step-by-step guide to building a custom console here:

http://scug.be/blogs/sccm/archive/2008/0 7/16/building-a-custom-configmgr-2007-admin-console.aspx

"Robert Lourenco" <=?utf-8?B?Um9iZXJ0IExvdXJlbmNv?=> wrote in message news:bbb80054-0ccc-420 f-a07a-38c10a921787...
Sorry,

Would i maybe have to set the group permissions on the Collection class, All instances, read and use remote tools options?

Lock down Admin Console and remote tools

Wed, 24 Jun 2009 22:04:35 Z

Or the standard product docs :-)

http://technet.microsoft.com/en-us/library/bb680691.aspx

Wally Mead