"You cannot shadow a ts connection to xp." Dan - Good clarification. I didn't really differentiate between the CLIENT ts function and the SERVER.
Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Holme Sent: Thursday, July 14, 2005 1:42 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Remote Desktop vs. Remote assistance BOTTOM LINE I think I know what you're saying and RA *is* the answer. Set up RA using GPOs. IN group policy, you add your "Help Desk" group as the "HELPERS" group that is allowed to OFFER remote assistance: Computer config\admin templates\system\remote assistance And specify that they are allowed to remotely control the system. That's all you need to do. Now, when a user calls, the help desk says "hold on", launches an RA session to the user's desktop. The ONLY potential difference from VNC is that the user will get a little notice that says "Dan is wanting to offer remote assistance" and will have to click "OK." At that point the helper can view, no problem. There is a second confirmation box IF the helper actually launches "control". But believe me, the messages are clear enough and the help desk is on the phone anyway, right? So it's not tough to figure out! It beats having a third party app doing the same thing!!!!! One less thing to manage (and RA, as part of XP and GPO infrastructure is EASIER to manage), and one less thing to have to keep up with patches on. DETAILS You cannot shadow a ts connection to xp. Remember how it works on a server... the user is ts'd to the server; the support person has a SEPARATE ts to the server and "jumps in" to the user's ts. It requires multiple TS connections and XP doesn't support that. The ONLY 'shadow' to a THICK client is RA. If XP is TS'd into a TS, then you can shadow that TS connection (as described above). I am working with a high profile client right now and we just 'banished' VNC on XP systems. We found its admin logon encryption lacking, in the version we were using, and, more importantly, it just wasn't necessary. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, July 14, 2005 11:09 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Remote Desktop vs. Remote assistance thanks alot, rick and dan. can you "shadow" a ts connection to xp like on server? as to the user giving me control, i thought that was just a policy that could be configured, NOT hardwired into the os somehow. I thought if i was a DA and by default then a local admin on the box, when i RA in, i could over rule that setting somehow since i am in actuallity a admin of the box. I only ask because we use VNC here for some help desk stuuf and i wanted to replace it with RA since we are mostly xp on the client but i'm araid with this "asking" for help stuff and "allowing" access, my users would get confused awfully quick. they don't adapt well to change. usually, someone here calls them and then says "ok, i'm gonna connect to your machine" or they might be away and a help desk admin connects to their box. RA doesn't seem to make this as simple as vnc does, i guess. I still wonder how as an admin you can be denied RA access to a box or need permission. is it a local system thing? thanks for all your help and sorry to bore you with my issues. -----Original Message----- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Thursday, July 14, 2005 1:51 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Remote Desktop vs. Remote assistance With Remote Desktop, you are going to take over the machine (in the case of XP) kicking off any logged on person in the act of taking over the machine. Your access is the same as the credentials in which you login as. With Remote Access, you need to receive an invitation and the user is not kicked off. Both of you will see what is on the screen, and initially you have view only access. The user has to GIVE you control, and can take it back, in the event that you go nuts and attempt to format the drive, delete files, etc. Not that it would ever happen to you, Tom... ;-) Does that help? Rick -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom Sent: Thursday, July 14, 2005 12:30 PM To: ActiveDir (E-mail) Subject: [ActiveDir] Remote Desktop vs. Remote assistance What is the actual diff between RD and RA? If i RD to a winxp desktop, that allows 1 connection. Can someone Shadow it or no? Is there any reason to use one over the other for support? or is RA just easier/better because you can share the session and you can see what a user is doing and interact? Also, is there a gpo or reg hack that allows me as a Domain Admin to RA to a user w/o her asking for RA via and email or im or file transfer or "allowing" me to log on? Thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
