Enable two people to edit server settings simultaneously?

[fredted40x]

Hi all,

 

The other day i needed to reset a user account password but was unable to remote desktop into the server as another administrator was setting up a printer.

 

Is there a was of allowing two people to perform different roles on the server at the same time?

 

Im guessing a remote desktop piece of software wouldnt work as i would see what he is doing so im wondering if there is an active directory user and group editor that can be installed onto a admin machine.

 

Thanks in advance.

[ChrisH]

I thought you could still get at least 2 admins to log on at once with 2008 R2.

Try both of the following:

 

mstsc -v:servername

mstsc -admin -v:servername

 

Have one use the first command line (which I assume you are both doing now) and have the other use the one with -admin in as this is the equivalent of the old -console switch. The other alternative is to install the admin tools to your workstation http://www.microsoft.com/download/en/details.aspx?id=7887

[fredted40x]

found out that there is a setting in the remote session host configuration ' restrict each user to a single session'

 

I wonder if its possible to get three sessions going. It doesnt like it if they all use the same account at the mo.

Edited September 11, 2011 by fredted40x

[Arthur]

an active directory user and group editor that can be installed onto a admin machine.

Remote Server Administration Tools

 

 

Is there a was of allowing two people to perform different roles on the server at the same time?

As you have found out, to enable two administrators to work on a server simultaneously via remote desktop, you need to disable the "Restrict Remote Desktop Services users to a single Remote Desktop Services session" policy (on the server). Either through the Local Group Policy Editor (gpedit.msc)...

 

Computer Configuration » Administrative Templates » Windows Components » Remote Desktop Services » Remote Desktop Session Host » Connections

 

or the registry...

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services]
"fSingleSessionPerUser"=dword:00000000

 

Edit. Too slow.

Edited September 11, 2011 by Arthur

[Arthur]

Another option would be to use the Set-ADAccountPassword PowerShell cmdlet from a client PC.

 

Set-ADAccountPassword -Identity JoeBloggs -Reset

 

or

 

$newPassword = (Read-Host -Prompt "Provide New Password" -AsSecureString); Set-ADAccountPassword -Identity JoeBloggs -NewPassword $newPassword -Reset

[ChrisH]

Another option would be to use the Set-ADAccountPassword PowerShell cmdlet from a client PC.

 

Set-ADAccountPassword -Identity JoeBloggs -Reset

 

or

 

$newPassword = (Read-Host -Prompt "Provide New Password" -AsSecureString); Set-ADAccountPassword -Identity JoeBloggs -NewPassword $newPassword -Reset

 

You're just showing off now