Lock down Admin Console and remote tools

2009年6月23日 13:08Robert Lourenco

0
登录进行投票
Hi Guys

I would like to achieve the following but I am not sure how:

1. I would like to allow certain administrators that are apart of a certain security group access to use remote tools and more specifically remote desktop to connect to users computers. I have installed the consoles and everything is fine. But I would like to lock down the consoles some how so that they can only see the collections option in there consoles and nothing else. At the moment they can see everything.

Is this possible? any help would be greatly appreciated.

2. Also, is there anyway that instead of logging the user out when using remote desktop that the administrator can just carry on from the current users session?

Thanks so much guys.
- 回复
- 引用

答案

2009年6月23日 15:04Kent Agerlund

1
登录进行投票
Yes, you configure it on the Collection object. Also configure the permissions in the properties of the remote tools client agent.
Kent Agerlund | http://agerlund.spaces.live.com/blog/
- 已标记为答案WallyMSFT, Besitzer2009年6月23日 19:59
- 回复
- 引用

全部回复

2009年6月23日 13:26Kent Agerlund

0
登录进行投票
Hi,

1) You can configure security in Config Mgr. on almost each object in the console. You can also create a custom console that only show the collections

2) Remote desktop is not the tool you want to use for that, in stead use Remote assitance or the SMS remote tools.
Kent Agerlund | http://agerlund.spaces.live.com/blog/
- 回复
- 引用
2009年6月23日 13:44Robert Lourenco

0
登录进行投票
Hi Kent

Thanks. answer 2 totally solves my problem there.

As for question 1 again. I have looked in the objects and cannot find which object it would be. There isnt really a remote tools object.
- 回复
- 引用
2009年6月23日 13:45Robert Lourenco

0
登录进行投票
Sorry,

Would i maybe have to set the group permissions on the Collection class, All instances, read and use remote tools options?
- 回复
- 引用
2009年6月23日 15:04Kent Agerlund

1
登录进行投票
Yes, you configure it on the Collection object. Also configure the permissions in the properties of the remote tools client agent.
Kent Agerlund | http://agerlund.spaces.live.com/blog/
- 已标记为答案WallyMSFT, Besitzer2009年6月23日 19:59
- 回复
- 引用
2009年6月24日 7:39Kim Oppalfens [MVP]MVP

1
登录进行投票

You can find a step-by-step guide to building a custom console here:

http://scug.be/blogs/sccm/archive/2008/0 7/16/building-a-custom-configmgr-2007-admin-console.aspx

"Robert Lourenco" <=?utf-8?B?Um9iZXJ0IExvdXJlbmNv?=> wrote in message news:bbb80054-0ccc-420 f-a07a-38c10a921787...
Sorry,

Would i maybe have to set the group permissions on the Collection class, All instances, read and use remote tools options?
- 回复
- 引用
2009年6月24日 22:04WallyMSFT, Besitzer

0
登录进行投票
Or the standard product docs :-)

http://technet.microsoft.com/en-us/library/bb680691.aspx
Wally Mead
- 回复
- 引用