none
what rights are needed to do.....

    Question

  • if you go into Computer Manager (on a remote machine) and drill down to:  Shared Folders \ Sessions what AD rights are required to end someone's session?    Does that require domain admin rights or can you grant limited rights and if so which rights?


    mqh7

    Tuesday, January 3, 2017 7:14 PM

All replies

  • Hi mqh,

    >what AD rights are required to end someone's session?    Does that require domain admin rights or can you grant limited rights and if so which rights?

    It need Admin account or accounts in Admin group, otherwise, we'll see this:

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, January 4, 2017 7:21 AM
    Moderator
  • Hello,

    As far as I remember you need Administrator or Power User permissions to achieve this. However, as Power Users have different permissions in different versions of the Windows Server you should verify that first.

    /Regards

    Wednesday, January 4, 2017 9:38 AM
  • To remotely control another user's session, you must have Full Control permission or Remote Control special access permission.
    Wednesday, January 4, 2017 10:23 AM
  • sunny.sinha, I believe what you are saying refers to Remote Desktop sessions.
    Wednesday, January 4, 2017 10:24 AM
  • I refer to the sessions
    Thursday, January 5, 2017 7:57 AM
  • our support team is the ones requesting this.   All of them are in a group called DesktopAdmins and this AD group is a member of the Local Administrators group on all Windows 7 workstation.   Yet they still can't end a remote session.

    What else is required?  


    mqh7

    Friday, January 6, 2017 2:28 PM
  • Hi mqh7,

    >Yet they still can't end a remote session.

    Just want to confirm what do you mean "can't end a remote session".

    Do you mean unable to click "end session" or after "end session" and refresh, the session will show up again?

    If you mean the later one, then, it is expected, if clients is visit the shared folder, then after admin end the session, refresh will show the session again.

    If you want to use this way to control user access to the folder, then, you'd use ACL of the folder to control user access.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, January 9, 2017 8:28 AM
    Moderator
  • Hi,

    Just to check if the above reply could be of help? If yes, you may mark useful reply as answer, if not, feel free to feedback.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, January 25, 2017 2:03 AM
    Moderator