Re: logoff user to connect administrator when 2 users are active

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Thank You, Soo Kuan for reminding me ot that tools!
Vera's suggestion for a time limmit (logoff or disconnect if inactive) is
not apporpriate for my case, because my common practice is to leave the
workplace and go have a walk to rest (sometimes for long). Then I may come
back to continue what I am doing.

On the other hand the qwinsta.exe and rwinsta.exe and logoff.exe tools can
be started from a web page interface (ASP). I can always logon as
Administrator via HTTPS and use web interface to see what user accounts are
logged on and to logoff one of them on my choice.

I believe that this will be the best way, because it is secure, reliable and
there will be no idle sessions reset.
I only need some free time to study ASP... Visual Studio will be a good
friend for this.


"Soo Kuan Teo [MSFT]" <sookuant@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:ed0zSVwwHHA.2432@xxxxxxxxxxxxxxxxxxxxxxx
| Have you tried using Terminal Services command line tools? You can use
| Qwinsta.exe to query sessions on a server, and use logoff.exe <session id>
| to logoff sessions.
| For more info, please goto start menu->Help and Support->Software
| Deployment->Terminal Services
|
| Thanks
| Soo Kuan
|
|
| --
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
| "Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| news:Xns99689064B674Averanoesthemutforsse@xxxxxxxxxxxxxxxx
| > If you find that all of your administrative sessions are active
| > because you have forgotten to logoff when you left home, you could
| > also implement a time out limit on idle sessions, and have them
| > automatically reset after let's say one hour.
| > That's done in Terminal Services Configuration.
| > _________________________________________________________
| > Vera Noest
| > MCSE, CCEA, Microsoft MVP - Terminal Server
| > TS troubleshooting: http://ts.veranoest.net
| > ___ please respond in newsgroup, NOT by private email ___
| >
| > "George Valkov" <a@xxxxx> wrote on 08 jul 2007 in
| > microsoft.public.windows.terminal_services:
| >
| >> That friend of mine just gave me a great idea! I can learn how
| >> to create a web application that will show me the active
| >> Terminal Sessions and allow me to reset one :-)
| >>
| >> Secure logon (HTTPS) to it will always be available :-)
| >>
| >>
| >> "George Valkov" <a@xxxxx> wrote in message
| >> news:%23DMALBawHHA.484@xxxxxxxxxxxxxxxxxxxxxxx
| >>| Thank You very much, Vera!
| >>|
| >>| "Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
| >>| in message
| >>| news:Xns9967D3B5AEAAAveranoesthemutforsse@xxxxxxxxxxxxxxxx
| >>|| There's no option or registry setting for this.
| >>|| Administrative sessions are designed for use by Administrators
| >>|| only.
| >>|
| >>| Aha! Well, I use it to make my home PC a mobile one and bring
| >>| it to the university or whereever I need to. It's very usevul!
| >>| :-)
| >>|
| >>|| It should be a very rare situation to have 2 Administrators
| >>|| already logged on but not able to fix the problem, and thus
| >>|| the need for a third Administrative session (while there is
| >>|| also something running on the console which can't be
| >>|| interrupted).
| >>|
| >>| In one extremely rare situation, a student has windows server
| >>| 2003 enterprise installed on his home PC... I mostly work on
| >>| the console (this admin account A0 is denied access from
| >>| network and and RDP for security reasons), but sometimes I have
| >>| a second session (as my second admin
| >> account
| >>| A2) console to localhost. This allows me to better arrange my
| >>| workspace, when there are many design applications running.
| >>| Sometimes I leave home
| >> and
| >>| logon from my university (as A2). So far so good...
| >>| If I forget to close the second terminal session (as A2), oh
| >>| and by the
| >> way
| >>| a friend of mine may logon (power user) from the other side of
| >>| the planet ;-) ... (I shall ask him to logoff, when he don't
| >>| need to be logged on.) That's 2 out of 2 and I can no longer
| >>| logon/connect as the already open session of A2 from my
| >>| university (if it's still active at localhost). And the
| >>| console... Well I like recording movies from the TV and
| >>| compressing them. This takes a lot of time, so I prefer not to
| >>| interrupt it, but I
| >> would
| >>| do so if I need to.
| >>|
| >>|
| >>|| In
| >>|| that case, you best option is to use the phone and ask one of
| >>|| the other Administrators to log off. Or, if you can connect to
| >>|| your network, send them a message.
| >>|
| >>| The phone will probably do! Or if I can catch my friend online.
| >>|
| >>|
| >>|| If you are using Administrative sessions to give normal users
| >>|| access to your server, then you should really install Terminal
| >>|| Services, not just Remote Desktop for Administration.
| >>|
| >>| And if I do so, what will be the minimum configuration that
| >>| does not
| >> require
| >>| me to buy any licenses?
| >>|
| >>|
| >>| George Valkov
| >>|
| >>|
| >>|
| >>|| "George Valkov" <a@xxxxx> wrote on 08 jul 2007 in
| >>|| microsoft.public.windows.terminal_services:
| >>||
| >>|| > Remote desktop for Administration mode.
| >>|| > Suppose that two user are logged on the terminal server.
| >>|| > (all 2 available slots are busy)
| >>|| >
| >>|| > Now what if an Administrator has to logon (emergency) from
| >>|| > far away place on the internet side?
| >>|| > I receive this error:
| >>|| > The terminal server has exceeded the maximum number of
| >>|| > allowed connections.
| >>|| >
| >>|| > How do I tell the server to throw a dice and disconnect or
| >>|| > logoff someone (it doesn't matter who)? It is more important
| >>|| > that the Administrator can logon.
| >>|| >
| >>|| > What options are available?
| >>|| > 1. A configuration or registry setting? Where?
| >>|| > 2. /console ?
| >>|| > 3. What if I do not want to logoff the console session?
| >>|| >
| >>|| > Thank You for any advice and information!
| >>|| >
| >>|| > George Valkov
|


.



Relevant Pages

  • Re: Giving user / group ability to logoff user
    ... Tell the administrators to logoff and not lock the computer. ... > as these select users can log in to the server. ... > operators (whom have no admin privilages)are stuck. ...
    (microsoft.public.win2000.security)
  • Re: logoff user to connect administrator when 2 users are active
    ... You can use Qwinsta.exe to query sessions on a server, and use logoff.exe to logoff sessions. ... || Administrative sessions are designed for use by Administrators ...
    (microsoft.public.windows.terminal_services)
  • Re: using Terminal server for applications management
    ... You're right, they find that 2 sessions are'nt enough to work, because there are tree to work, and sometime i have to get a session too. ... I have to confess that actually on Windows 2k, they already use terminal services without any troubles, and they dont understand that, because of a migration on windows 2003, they can not use terminal services any more, except because they changed the IT Manager:) ... has any other role, like being a database server, domain controller, exchange server or whatever. ... Having more than 2 administrators working *simultaneously* on a server is in itself a dangerous situation. ...
    (microsoft.public.windows.terminal_services)
  • Re: Server Crashing
    ... Well, yes, if 2 administrators are installing patches simultaneously, ... The idea with the 2 concurrent ... disconnected or broken sessions, ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Log off or Lock file server console
    ... If there are more administrators in the house for that server then you ... The difference is that when you lock the console your profile and all your ... If you logoff your profile is ...
    (microsoft.public.win2000.security)