Understanding Terminal Services Manager Permissions
Applies To: Windows Server 2008
Terminal Services permissions are used to control which users or groups can perform particular tasks on the terminal server, such as remotely controlling a user session.
You can manage permissions on a per connection basis in Terminal Services Configuration. The permissions are listed on the Security tab in the Properties dialog box for the connection.
The connection permissions that are set in Terminal Services Configuration determine the actions that a given user can perform in Terminal Services Manager. For example, a user must have at least the Remote Control special access permission in order to remotely control a user session by using Terminal Services Manager.
The following is a list of some of the permissions that you can set in Terminal Services Configuration and the capability that each permission provides.
| Permission | Capability |
|---|---|
Query Information |
Query sessions and terminal servers for information |
Remote Control |
View or actively control another user's session |
Logon |
Log on to a session on the terminal server |
Logoff |
Log off a user from a session |
Message |
Send a message to a user session |
Connect |
Connect to another user session |
Disconnect |
Disconnect a user session |
For more information about setting permissions in Terminal Services Configuration, see the topic "Configure Security Settings for Terminal Services Connections" in the Windows Server 2008 Terminal Services Configuration Help.