1. After install SCCM 12, I found after enable Remote Tools, the remote Desktops on my clients are ->Disabled.
To fix it. I created a Group policy for remote login settings. The following Area need to be changed. Make sure you read the description before you change each of them. The changes I made suit my case.


Computer Configuration

Policies /Administrative Templates /Windows Components/Remote Desktop Services/Remote Desktop Connection Client

  • Allow .rdp files from unknown publishers ->Enabled 
  • Allow .rdp files from valid publishers and user's default .rdp settings ->Enabled 

Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections

  • Allow remote start of unlisted programs ->Enabled 
  • Allow users to connect remotely using Remote Desktop Services ->Enabled 
  • Automatic reconnection ->Enabled 
  • Set rules for remote control of Remote Desktop Services user sessions ->Enabled 

      Options: Full Control with user's permission
 

Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security

  • Do not allow local administrators to customize permissions ->Disabled 
  • Require user authentication for remote connections by using Network Level Authentication ->Disabled   (This is exactly the part to choose option -> Allow connections from computer running any version of Remote Desktop (Less Secure))

User Configuration
Policies/Administrative Templates/Policy definitions (ADMX files) retrieved from the central store.Windows Components/Remote Desktop Services/Remote Desktop Connection Client

  • Allow .rdp files from unknown publishers ->Enabled 
  • Allow .rdp files from valid publishers and user's default .rdp settings ->Enabled 

Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections

  • Set rules for remote control of Remote Desktop Services user sessions ->Enabled 

   Options: Full Control with user's permission
 

Windows Components/Remote Desktop Services/Remote Desktop Session Host/Device and Resource Redirection

  • Do not allow clipboard redirection ->Disabled 

About Lei

I am an IT specialist with over 10 year experience - years on Automation, on-Premise or Azure.

I am happy to develop however never want be a full time developer. Only do what I have to do. If it has to be PowerShell,HTML, PHP, CSS, C#, VBS or JS, front end or backend, so be it, doesn't matter!

Spent years with Windows, SCCM, SharePoint, SQL and Exchange servers. For last several years, I have been actively working under On Premise > Azure environment.

THERE IS NO WAY BACK!!!

Current Certificates:
    Microsoft® Certified-
  • -Enterprise Administrator
  • -Database Administrator
  • -SharePoint Administrator
  • -Administering and Deploying SCCM 2012
Red Hat Certified Technician
ITIL V3 Foundation - Practitioner

Working on Azure Certificates now and hopefully they can stop upgrading their questions one day! GIVE ME A BREAK!

Contact Lei

Name *
Email *
Comments *

Traffic since 10/08/2016

Today51
Yesterday83
This week675
This month1971
Total416331

Visitor Info

  • IP: 54.227.51.103
  • Browser: Unknown
  • Browser Version:
  • Operating System: Unknown

Who Is Online

1
Online

2017-12-17

Login