Windows by default will allow all administrators (domain admins, local admins, etc...), but no one else. To allow non admins you need to add them to the "Remote Desktop Users" group. You can do this easily enough via control panel (if you can remote in as an admin on the machine), but if you have a hundred machines, the following becomes more friendly (and much quicker, if you use the up arrow to retrieve the last command in your command line history). You will need psexec.
psexec -h \\remote-pc -u domain\administrator net localgroup "remote desktop users" domain\user1 /add
Showing posts with label remote desktop. Show all posts
Showing posts with label remote desktop. Show all posts
Tuesday, February 19, 2013
enable remote desktop
Windows remote desktop, so useful, especially in an office environment, where you just have to do some things with a mouse, but it's not enabled by default (probably a good thing for security reasons).
But what if you want to get into a remote windows machine, and it's over an hour away, talk the person through control panel?, or just go in yourself (especially when you have about a dozen computers to do this with)?.
The following changes a value in the registry which will then enable remote desktop, you could use regedit, and it's connect to network registry feature (though with windows 7 you have to enable the remote registry service for that to work), but I prefer the following:
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t reg_dword /d 0 /f
some say that you have to reboot the machine after you do this, I personally didn't (maybe I was lucky?)
you can run the above command via psexec (the -h is required for windows vista/7 machines),
ie: psexec -h \\remote-pc -u domain\administrator reg add "HKLM ....
thanks to orielly and the backroomtech.com for the registry edit, if you want the gui version check these sites:
http://oreilly.com/windows/archive/server-hacks-remote-desktop.html
http://thebackroomtech.com/2007/05/18/how-to-enable-remote-desktop-on-a-windows-xp-machine-remotely/
But what if you want to get into a remote windows machine, and it's over an hour away, talk the person through control panel?, or just go in yourself (especially when you have about a dozen computers to do this with)?.
The following changes a value in the registry which will then enable remote desktop, you could use regedit, and it's connect to network registry feature (though with windows 7 you have to enable the remote registry service for that to work), but I prefer the following:
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t reg_dword /d 0 /f
some say that you have to reboot the machine after you do this, I personally didn't (maybe I was lucky?)
you can run the above command via psexec (the -h is required for windows vista/7 machines),
ie: psexec -h \\remote-pc -u domain\administrator reg add "HKLM ....
thanks to orielly and the backroomtech.com for the registry edit, if you want the gui version check these sites:
http://oreilly.com/windows/archive/server-hacks-remote-desktop.html
http://thebackroomtech.com/2007/05/18/how-to-enable-remote-desktop-on-a-windows-xp-machine-remotely/
Subscribe to:
Posts (Atom)