Remote Control with logged off user
Hi,We have SCCM 2007 installed and most of the time we use the Remote Tools feature for helpdesk support.We would like to let the user know what we are doing even if we log out and log in with another username, however, Remote Tools requires a user to be logged on to work.Is there some kind of workaround for this so that we can even shadow screens like the login screens, etc?ThanksAS
December 2nd, 2009 4:40pm

No, you will need to use a 3rd party tool to shadow the login screen. Nothing in the product will allow this. Many people have requested this for the next version of ConfigMgr. All you can do is really wait to see if it is added.If you search the forum you will find thedifferent products people have been recommending to get around the problem you are experiencing.http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2009 4:54pm

In essence the initial story was that this is no longer allowed as it is a security risk.If you login with admin credentials and the connection is broken for whatever reason the user is left with an admin session at his disposal.So only 2 scenarios were left implemented1) You need to assist a user in performing a task, hence the user needs to see what you are doing, and you are doing it using his credentials. -> use remte Assistance or remote tools2) You need to perform an admin task on a machine, so from a security perspective the user shouldn't be able to intervent -> use remote desktop.The scenario you are talking about was deprecated from a security perspective, yet opens up one scenario where a user has locked his machine and has unsaved data for which no good solution is available, as when you use remote desktop here the user will lose data.There have been public presentations that this scenario would be back in the vNext release of sccm, but that's obviously always with the disclaimer that this is talking about pre-release software for which there isn't even a beta version yet."Everyone is an expert at something" Kim Oppalfens Configmgr expert for lack of any other expertise. http://www.scug.be/blogs/sccm
December 2nd, 2009 5:33pm

" if we log out and log in with another username" Just to add my 2 cents. In my very humble opinion, there are seldom cases where you need to log out the user, and login as a different user, if there is a user there to accept the remote control request. Your remote-control (generally helpdesk) personnel should becomfortable with using "RunAs" credentials to install software, or do whatever functions it was that they needed to do as the other logged in user account.Of course, if the computer is logged in, and there is no one there to accept the remote control request, I can see it being an issue--remotely log off the user so you can login with Remote Desktop (and risk that user losing data) or not? That's a policy/procedure question best answered by your management. Some companies would say it's "acceptable risk" in order to complete troubleshooting, at other companiesthat could bea termination offense.fyi, Completely, totally, 100% NOTsupported--> http://www.myitforum.com/articles/15/view.asp?id=9570. Although that wouldn't help you if the target computer was locked.Standardize. Simplify. Automate.
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2009 6:10pm

Thanks alot for your valuable input. Much appreciatedAS
December 3rd, 2009 1:30pm

If you feel your question has been answered than please mark one of the posts as answered, which saves us from re-screening already answered posts."Everyone is an expert at something" Kim Oppalfens Configmgr expert for lack of any other expertise. http://www.scug.be/blogs/sccm
Free Windows Admin Tool Kit Click here and download it now
December 3rd, 2009 1:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics