none
Delegate permissions to Disconnect and Sign Off user sessions

    Question

  • Is it possible to delegate permissions to disconnect and Sign Off Remote Desctop session in Windows Server 2012 to non-administrators?

    Friday, November 22, 2013 12:05 PM

Answers

  • Hi,

    To permit non-admin users to Disconnect or Sign Off other users, you need to grant the user/group permissions to the RDP-Tcp listener on each RDSH server.  To do this, first create a security group in your domain and add the users as members that you would like to have logoff/disconnect/etc. permission.  Next log on to each 2012 RDSH server, open an administrator command prompt, and enter the following command (substitute your domain and group name):

    wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "domain\group",2
    
    

    The above grants them Full Control to the RDP-Tcp listener, so they will also have additional abilities like Shadow, send messages, etc.  Server 2012 R2 is required for shadowing to work.

    -TP

    Monday, November 25, 2013 9:25 PM
    Moderator
  • Monday, November 25, 2013 3:10 PM
    Moderator

All replies

  • Monday, November 25, 2013 3:10 PM
    Moderator
  • Hi,

    To permit non-admin users to Disconnect or Sign Off other users, you need to grant the user/group permissions to the RDP-Tcp listener on each RDSH server.  To do this, first create a security group in your domain and add the users as members that you would like to have logoff/disconnect/etc. permission.  Next log on to each 2012 RDSH server, open an administrator command prompt, and enter the following command (substitute your domain and group name):

    wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "domain\group",2
    
    

    The above grants them Full Control to the RDP-Tcp listener, so they will also have additional abilities like Shadow, send messages, etc.  Server 2012 R2 is required for shadowing to work.

    -TP

    Monday, November 25, 2013 9:25 PM
    Moderator
  • Thank you guys, that is helpful, using WMI I can change the rights, but in task manager it still does not have options Sign Off. Is it possible to enable this too?
    Tuesday, December 03, 2013 2:43 PM