locked
SCCM Remote tool admin right RRS feed

  • Question

  • Hi

    I have got some desktops under sccm 2007 server. I would like remotely administer those desktop clients. I dont want to give helpdesk users domain admin right. I dont want to give end user local admin right. I want helpdesk user to administer such as, un/installing software. is there any way to configure sccm remote tool.

    any other tooladvise is welcome, in that case it is desierable to get common feature such as reqire end user permission, session log of remote connection.

    br

    raofu

    Thursday, March 29, 2012 10:47 AM

Answers

  • sccm remote tool will not provide you such kind of actions,sccm remote tools used to remote the session if user has enough rights .

    why dont you make account member of local admin rights ? like http://eskonr.com/2010/09/make-account-member-of-local-adminswhich-may-be-useful-in-configuration-manager-for-installation-of-sccm-client-push/

    and use user accounts(remote sessions) can do the install/uninstall stuff from computers ?


    Please click on "vote as Helpful" if you feel this post helpful to you.

    Eswar Koneti | My Tech blog: www.eskonr.com | Linkedin: Eswar Koneti

    Thursday, March 29, 2012 11:17 AM
  • A quick follow-up comment upon re-reading you original post. Helpdesk folks do not need domain admin rights to install or uninstall software. The user directly performing the action does need local admin rights. Or, better yet, why not use the power of ConfigMgr and create advertisements that perform these actions that can then be initied by the help desk tech or even the end-user if you so choose?


    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys

    • Marked as answer by Sabrina Shen Tuesday, April 3, 2012 7:23 AM
    Friday, March 30, 2012 10:07 PM

All replies

  • sccm remote tool will not provide you such kind of actions,sccm remote tools used to remote the session if user has enough rights .

    why dont you make account member of local admin rights ? like http://eskonr.com/2010/09/make-account-member-of-local-adminswhich-may-be-useful-in-configuration-manager-for-installation-of-sccm-client-push/

    and use user accounts(remote sessions) can do the install/uninstall stuff from computers ?


    Please click on "vote as Helpful" if you feel this post helpful to you.

    Eswar Koneti | My Tech blog: www.eskonr.com | Linkedin: Eswar Koneti

    Thursday, March 29, 2012 11:17 AM
  • As Eswar pointed out, Remote Tools is simply a tool to connect to the system in question. Actual rights/privilieges on that system depends upon who is logged on and is outside the control or influence of ConfigMgr.

    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys

    Thursday, March 29, 2012 12:13 PM
  • Also session should be unlocked. Any suggestion of paid third party tool is welcome

    Thursday, March 29, 2012 12:21 PM
  • A quick follow-up comment upon re-reading you original post. Helpdesk folks do not need domain admin rights to install or uninstall software. The user directly performing the action does need local admin rights. Or, better yet, why not use the power of ConfigMgr and create advertisements that perform these actions that can then be initied by the help desk tech or even the end-user if you so choose?


    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys

    • Marked as answer by Sabrina Shen Tuesday, April 3, 2012 7:23 AM
    Friday, March 30, 2012 10:07 PM