Petri.com forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Microsoft Networking Services > Terminal Services
Petri.com is happy to award RicklesP the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read
Notices

Disable Reconnects?

Disable Reconnects?

this thread has 6 replies and has been viewed 815 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 12th April 2012, 22:08
awhelan awhelan is offline
Casual
Casual
 
 Join Date: Apr 2012
  6 month star 12 month star
 Posts: 7
 Reputation: awhelan is on a distinguished road (10)
Default Disable Reconnects?

Hi,
I have an odd question that I was hoping someone might have an answer to. Say we have a generic account used by a few people connecting into a remote services server. Person 1 uses the shared credentials to establish a remote desktop session. Person 2 a few minutes later uses the same credentials to establish a connection, which in turn makes Person 1 lose the session and now Person 2 has control over that session.
Is there a way to basically say if a session is established with a set of credentials it can not be taken over, Person 1 would have to disconnect their session before someone else could use those credentials again to establish a connection to the server? Please let me know if I did not make this clear enough.

Thank You
  #2  
Old 13th April 2012, 00:40
MVP yuval14 yuval14 is offline
MVP
MVP
 
 Join Date: Oct 2003
  6 month star 12 month star
 Location: IL
 Posts: 2,020
  Send a message via MSN to yuval14
 Reputation: yuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of light (506)
Default Re: Disable Reconnects?

You can force log off disconnected sessions after a minute for example...
But first... Why to use gerneric account at all? I guess that the solution design didnt planned to answer a common security issues...
__________________
Best Regards,

Yuval Sinay

LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14
  #3  
Old 13th April 2012, 01:04
awhelan awhelan is offline
Casual
Casual
 
 Join Date: Apr 2012
  6 month star 12 month star
 Posts: 7
 Reputation: awhelan is on a distinguished road (10)
Default Re: Disable Reconnects?

Hi,
I know this goes against best practices and other standards, it is a way for us to attempt to control access to particular third party apps. I can't find any build in configuration options that allow for what I want, most likely because terminal services is not meant to work in this manner. Turning the time down to 1 minute would not help because Person 2 can take over an active session from Person 1 when using the same credentials. What I really need is for the system to see the active user session and not allow that user to connect in from anywhere else until the session has been disconnected. Therefore not allowing anyone to take over the original session. I would like to think there might be some registry work around for this, but I would have no idea.
Thank you for any additional input.
  #4  
Old 13th April 2012, 04:04
MVP yuval14 yuval14 is offline
MVP
MVP
 
 Join Date: Oct 2003
  6 month star 12 month star
 Location: IL
 Posts: 2,020
  Send a message via MSN to yuval14
 Reputation: yuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of light (506)
Default Re: Disable Reconnects?

You can use some script to check if some session is in disconnected state and then log off the user... The script can be run each second for example...

http://thebackroomtech.com/2008/04/0...vices-session/
__________________
Best Regards,

Yuval Sinay

LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14
  #5  
Old 13th April 2012, 15:34
awhelan awhelan is offline
Casual
Casual
 
 Join Date: Apr 2012
  6 month star 12 month star
 Posts: 7
 Reputation: awhelan is on a distinguished road (10)
Default Re: Disable Reconnects?

Hi,
Again that solution would not work in my case. I am not worried about when someone disconnects. I am worried that if Person 1 establishes a connection with the shared credentials and while actively using it Person 2 also establishes a connection with the shared credentials. In this case Person 1 will lose the session and Person 2 will take over. The main problem/question is can this be stopped? Basically if a user has an active session do not allow someone else to take over that session from another remote location.

Thank You
  #6  
Old 13th April 2012, 19:10
MVP yuval14 yuval14 is offline
MVP
MVP
 
 Join Date: Oct 2003
  6 month star 12 month star
 Location: IL
 Posts: 2,020
  Send a message via MSN to yuval14
 Reputation: yuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of lightyuval14 is a glorious beacon of light (506)
Default Re: Disable Reconnects?

Hi,

You can try to disable Automatic Reconnection:

http://support.microsoft.com/kb/323258
__________________
Best Regards,

Yuval Sinay

LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14
  #7  
Old 13th April 2012, 19:52
awhelan awhelan is offline
Casual
Casual
 
 Join Date: Apr 2012
  6 month star 12 month star
 Posts: 7
 Reputation: awhelan is on a distinguished road (10)
Default Re: Disable Reconnects?

Hi,
I can attempt to try this, but if I read this right it will just disable automatic reconnection attemps vs. stopping a new connection attempt all together.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Disable DEP with GPO ? tulik23 Windows Server 2008 / 2008 R2 2 15th March 2011 18:47
disable usb alex-2010 GPO 2 21st October 2010 01:33
disable usb asucimim General Hardware 1 17th January 2010 20:10
disable IPC$ S2002 Windows Server 2000 / 2003 / 2003 R2 3 7th June 2006 15:30
Disable USB in GPO eleibzon Active Directory 2 29th July 2004 22:21


All times are GMT +3. The time now is 02:44.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri