How can I enable Remote Desktop on hundreds of workstations?

[Michael]

Hello all,

I've created a free tool many of you may find useful within an XP/2003 environment. You can check out details here

Feedback would be much appreciated

[meastaugh1]

Isn't an MSI a bit overkill for changing one registry key value (HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\fDenyTSConnections=0)? Was there a reason for not using an adm?

[Michael]

By default there isn't an ADM that does this and I agree it's only a registry tweak, however as I am experimenting with MSIs it was a nice task to start with

[FN-GM]

Probably becuase an MSI is nice and simple

[ajbritton]

This can be done through group policy.

Computer Config, Admin Templates, Windows Components, Terminal Services, Allow Users to connect remotely using Terminal Services.

I've used this policy on dozens of sites to enable remote desktop logon to XP machines.

"Allow users to remotely connect to this computer" Remote Desktop option is grayed out

How to configure a computer to receive Remote Assistance offers in Windows Server 2003 and in Windows XP

[Michael]

I stand correct, thanks ajbritton I didn't know that policy existed.

[srochford]

The group policy settings reference from Microsoft is useful.

the one I've linked to is dated 2005 - I can't find a newer one except for Vista but this incudes over 1600 settings including the registry values which will be set, the adm file which includes it, the description and the explanation

[Michael]

I do administer lots of networks so I do have thorough knowledge of Active Directory and policies, but I'm only human at the end of the day! The guide should prove most useful.

I have created another package I know isn't included with GPOs, but again it's just a registry tweak. When logging onto a domain it greys out the Log on using dial up connection on 2000/XP/2003 systems. You can download the update here

[FN-GM]

I stand correct, thanks ajbritton I didn't know that policy existed.

Nor did i

[Michael]

Good to know I'm not alone. I am wondering if it didn't exist with Windows 2000 Active Directory (which would make sense) as of course Remote Desktop was a new feature introduced with Windows XP/2003. Windows 2000 was more based on Terminal Services even though it is compatible with Remote Desktop once installed through Add/Remove Programs > Windows Components.

[contink]

The work is appreciated nonetheless...

After all, how else would we all have found out we could already do it

[SYNACK]

Good to know I'm not alone. I am wondering if it didn't exist with Windows 2000 Active Directory (which would make sense) as of course Remote Desktop was a new feature introduced with Windows XP/2003. Windows 2000 was more based on Terminal Services even though it is compatible with Remote Desktop once installed through Add/Remove Programs > Windows Components.

If i recall it was in there in 2000 for any 2000 servers that were being managed under GP and were running TS, it is quite well buried though and I overlooked it for ages before finally discovering its functionality.