пятница, 29 мая 2009 г.

RDP на Windows Vista

Enable Remote Desktop via Windows Vista Graphical User Interface (GUI)
Click on Start button, then open Control Panel to select the System applet. Alternatively, right click on Computer icon and select Properties on right click contextual menu.
Click on the Remote Settings link in the left-hand task pane.


You will see System Properties window with Remote tab selected.


Select the radio button of either “Allow connections from computer running any version of Remote Desktop (less secure)” or “Allow connections only from computer running Remote Desktop with Network Level Authentication (more secure)”. If you’re using a Windows Vista RD clients to initiate the Remote Desktop session, you can safely select the later option. If you’re using non-Vista OS such as Win XP or Win2K, not sure or not understand, select the first option. See below note for more details.
Next, click on the Select Users button. You need to choose all non-administrative users that you intend to grant remote logon rights for them to remotely access or control this computer.
In the Select Users dialog, click on the Add button.
Type the name of the user you want to grant Remote Desktop access rights to, and then click OK.
Repeat above 2 steps to add more users.
Click on OK twice to save the settings.

Turn on Windows Vista Remote Desktop via Group Policy

To enable the Remote Desktop functionality, navigate to the following location in local computer policy or domain group policy (network wide effect to apply across the entire Active Directory network, and Windows Vista machine is needed in order to process the template files):

Computer Configuration \ Administrative Templates \ Windows Components \ Terminal Services \ Terminal Server \ Connections

At the location, find the policy named Allow users to connect remotely using Terminal Services, and set it to Enable.

To require the use of RDP version 6 and NLA, browse to the following location in local computer policy or domain group policy (restrictions and functions same as above):

Computer Configuration \ Administrative Templates \ Windows Components \ Terminal Services \ Terminal Server \ Security

In the folder, search for Require user authentication using RDP 6.0 for remote connections, and set it to Enable.

To control which users have access to the Vista system via Remote Desktop, you can add the authorized users to Remote Desktop Users group on the local machine, while those denied access should be removed from the list.

Enable Remote Desktop on Windows Vista via the registry
Open registry editor.
Navigate or browse to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server
Locate the fDenyTSConnections subkey, and change the DWORD value to 0.
To enforce the use of RDP 6.0 and NLA, navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\WinStations\RDP-Tcp
Locate the UserAuthentication subkey, and change the DWORD value to 1.
Exit registry editor and restart the computer to make the changes effective.