SOLVED

Allow non-admins to log off/disconnect other RDS users

%3CLINGO-SUB%20id%3D%22lingo-sub-2349694%22%20slang%3D%22en-US%22%3EAllow%20non-admins%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2349694%22%20slang%3D%22en-US%22%3E%3CP%3EGreetings%20all!%26nbsp%3B%20Okay%20I%20surrender!%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fhtml%2F%40FE3C8A5543DEF164D4C09E9B7F45E1A4%2Fimages%2Femoticons%2Ffacepalm_40x40.gif%22%20alt%3D%22%3Afacepalm%3A%22%20title%3D%22%3Afacepalm%3A%22%20%2F%3E%26nbsp%3B%20I%20have%20Googled%20like%20crazy%20-%20came%20across%20a%20few%20things%20-%20but%20just%20can't%20seem%20to%20find%20what%20I'm%20after!%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBasically%20on%20one%20of%20our%20Azure%20VM's%20(Windows%20Server%202016)%20I%20need%20to%20allow%20non-admin%20users%20to%20be%20able%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%20-%20ideally%20via%20Task%20Manager.%26nbsp%3B%20We%20be%20a%20small%20shop%20and%20running%20RDS%20on%20this%20one%20server....with%20approx%2015%20users....accessing%20QuickBooks%20Enterprise%20via%20RDS.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOccasionally%20a%20user%20experiences%20an%20issue%20with%20QuickBooks%20-%20is%20disconnected%20and%20can't%20connect%20again.%26nbsp%3B%20It's%20only%20me%20for%20tech%20support%20(one%20user%20has%20admin%20privileges)%20and%20if%20we're%20not%20available%20they%20have%20to%20wait%20-%20would%20be%20great%20that%20designated%20users%20can%20do%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20can't%20seem%20to%20find%20how%20this%20is%20done%20-%20looked%20easy%20for%202008!%20I%20be%20a%20%23JillofallTrades%20and%20sadly%20my%20Windows%20Server%20skills%20are%20not%20given%20much%20attention%20these%20days!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2349694%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ECompute%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EManagement%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2349790%22%20slang%3D%22en-US%22%3ERe%3A%20Allow%20non-admins%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2349790%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20follow%20TP%5B%5D's%20direction%20here.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fwindows%2Fen-US%2F7012f60c-327e-4969-b336-1b643b2166d5%2Fdelegate-permissions-to-disconnect-and-sign-off-user-sessions%3Fforum%3DwinserverTS%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDelegate%20permissions%20to%20Disconnect%20and%20Sign%20Off%20user%20sessions%20(microsoft.com)%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2349844%22%20slang%3D%22en-US%22%3ERe%3A%20Allow%20non-admins%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2349844%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3B%20Thanks%20Dave....I%20actually%20did%20that%20last%20night.....I%20couldn't%20get%20Task%20Manager%20up%20for%20a%20test%20user%20(without%20admin%20login%20prompt)....and%20it%20was%20quite%20late%20so%20I%20called%20it%20quits....might%20dig%20into%20this%20a%20bit%20more%20tonight....with%20wine...nothing%20else%20to%20do%20in%20lockdown%20here%20in%20Canada!%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fhtml%2F%407EBDB192371E60F0C05B7773EFC0C76E%2Fimages%2Femoticons%2Fxd_40x40.gif%22%20alt%3D%22%3Axd%3A%22%20title%3D%22%3Axd%3A%22%20%2F%3E%26nbsp%3B%20Shall%20update%20back%20here%20once%2Fif%20sorted...thanks%20again....cheers!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2349899%22%20slang%3D%22en-US%22%3ERe%3A%20Allow%20non-admins%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2349899%22%20slang%3D%22en-US%22%3E%3CP%3ESounds%20good.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2411823%22%20slang%3D%22en-US%22%3ERe%3A%20Allow%20non-admins%20to%20log%20off%2Fdisconnect%20other%20RDS%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2411823%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F24292%22%20target%3D%22_blank%22%3E%40Tammy%20Schwark%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi!%3C%2FP%3E%3CP%3EI%20have%20exactly%20the%20same%20question%20like%20Tammy.%20But%20I%20run%20Windows%20Server%202019%2C%20RDS%20environment.%20I%20tried%20the%20command%20mention%20in%20your%20link%20Dave%20(%3CEM%3Ewmic%20%2Fnamespace%3A%5C%5Croot%5CCIMV2%5CTerminalServices%20PATH%20Win32_TSPermissionsSetting%20WHERE%20(TerminalName%20%3D%22RDP-Tcp%22)%20CALL%20AddAccount%20%22domain%5Cgroup%22%2C2%3C%2FEM%3E)%20but%20it%20doesn%C2%B4t%20work.%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EI%20even%20found%20a%20GUI%20tool%20for%20this%3A%20%3CA%20href%3D%22https%3A%2F%2Fpurerds.org%2Fremote-desktop-free-tools%2Fadjust-rdp-permissions-brand-new-free-tool%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fpurerds.org%2Fremote-desktop-free-tools%2Fadjust-rdp-permissions-brand-new-free-tool%2F%3C%2FA%3E%3C%2FP%3E%3CP%3Ewhere%20I%20could%20confirm%20the%20command%2Fsettings%20like%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Greetings all!  Okay I surrender! :facepalm:  I have Googled like crazy - came across a few things - but just can't seem to find what I'm after!  

 

Basically on one of our Azure VM's (Windows Server 2016) I need to allow non-admin users to be able to log off/disconnect other RDS users - ideally via Task Manager.  We be a small shop and running RDS on this one server....with approx 15 users....accessing QuickBooks Enterprise via RDS.

 

Occasionally a user experiences an issue with QuickBooks - is disconnected and can't connect again.  It's only me for tech support (one user has admin privileges) and if we're not available they have to wait - would be great that designated users can do this.

 

Just can't seem to find how this is done - looked easy for 2008! I be a #JillofallTrades and sadly my Windows Server skills are not given much attention these days!

 

Thanks! 

4 Replies
best response confirmed by Tammy Schwark (Contributor)

@Dave Patrick  Thanks Dave....I actually did that last night.....I couldn't get Task Manager up for a test user (without admin login prompt)....and it was quite late so I called it quits....might dig into this a bit more tonight....with wine...nothing else to do in lockdown here in Canada! :xd:  Shall update back here once/if sorted...thanks again....cheers!

Sounds good.

 

 

 

@Dave Patrick @Tammy Schwark 

 

Hi!

I have exactly the same question like Tammy. But I run Windows Server 2019, RDS environment. I tried the command mention in your link Dave (wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "domain\group",2) but it doesn´t work.


I even found a GUI tool for this: https://purerds.org/remote-desktop-free-tools/adjust-rdp-permissions-brand-new-free-tool/

where I could confirm the command/settings like:

 

 

 

www.000webhost.com