Remote Desktop repeatedly installs ARD Client for standard users...

ARD 3.2 running on OS 10.5.4 on MacBook Core2Duos...
These are machines imaged from an asr disk image...
No issues with admin users...
Every time Remote Desktop is launched by a standard user, a admin user name / password is required and the Apple Remote Desktop Clint is reinstalled. After, ARD runs normally until it is quit and relaunched, even without a user logout...
Making the standard user an admin user resolves the issue. The issue returns when the admin right are removed from the user...
Have run permission repairs, removed and reinstalled Remote Desktop, manually checked permissions, etc...
It appears that from the standard user perspective, the ARD Client software needs to be updated. ...
Any ideas out there? I have to deploy these machines NOW and I am running out of ideas on this...
Thank you! Les

Dave,
Thank you for the ideas. While you are pretty much correct in what you have said, these are unfortunately not my issue(s). I wish they were!
1) ARD will run fine for a standard user (at least it did in Tiger) as long as it is properly setup and licensed by an admin user ahead of time (especially the entry of the license code). This I have done, and the license code is recognized just fine. I too thought of the promote / demote idea and have tried it. While promoted, it launches fine for the user, but upon demotion goes back to reinstalling the ARD Agent at each launch of the program (this install process does not run while the user is promoted)...
2) The systems are from the same disk image. However, I have given system its own unique, valid, legally purchased serial number. Though the program is loaded on the image, it has been installed only. It is not run or licensed on the master, only on the end-user client machines...
It appears to me that from the standard user perspective, the system thinks that the ARD Agent needs to be updated. I have verified with the PackageMaker SnapShot utility that the ARD Agent and its related files are being installed when this happens, and they appear to be the only thing being installed. The Remote Desktop Admin program itself seems to be fine.
Does anybody know exactly what happens at the file system lever when Remote Desktop is launched? I am thinking my standard user is lacking access to a particular file or directory or right, and I am sure I could quickly find it if I new what to trace. Watching fs_usage has yielded lots of information, but nothing that has helped...
I have also removed and reinstalled Remote Desktop to no avail. Disabled all ACLs on the file system, placed known-good receipts and run permission repairs, and forced chmod -R 777 down the path of everything I can find with the names Remote Desktop, ARD, etc...
I am a little worried at this point that the issue is created by the imaging process something like the question marks in docks in the latter updates of 10.4. I have seen similar issues come up (launching apps under Rosetta being one) with users' LaunchServices property lists after moving their home directories from one volume to another, making the issue very hard to track down, as they reside in files that do not contain the name of the app being affected...
Any further ideas would be much appreciated!
Les

Similar Messages

Allow application installations and updates for standard user account

Good Afternoon. Is there a way to configure/allow standard, non-admin user accounts to have access to only install applications or update applications? Is there a group those user accounts can be added to via dscl or some other method? Appreciate any help/input. Ideally I would like to grant users this access/option without giving them full administrative rights. Thank you.

When you're prompted for the administrator password, take note of the requested right in the dialog box, download TextWrangler from the developer's website(not the Mac App Store), and use it to edit the /private/etc/authorization file so that those accounts have that right.
(110103)

ARD client for iPhone & iPad

is there a ARD client for these either of these two devices to connect to my iMac?

Not ARD, exactly, but there are several VNC clients you can connect to your iMac with. The RealVNC app handles connections to 10.7+ machines better than other VNC apps, in my experience.

[Forum FAQ] Troubleshoot the error "The Remote Desktop Session Host server is in Per User licensing mode and No Redirector Mode"

Symptom
RD License server is a key component of RDS. It licenses users to access RDS servers.
After purchase the required RDS CALs, we need to activate the RDS License server and install the purchased RDS CALs. However, during the installation or after installation, we may face errors
about RDS License.
In most cases, the following error may occur.
Error:
The Remote Desktop Session Host server is in Per User licensing mode and No Redirector Mode, but license server "Server name" does not have any installed licenses with the following
attributes:
Product version: Windows Server 2012
Licensing mode: Per User
License type: RDS CALs
Troubleshooting
1. Check whether the RD License Configuration is configured properly and there are no Warnings in the Event.
2. The License Server should be part of 'RD Server License' group in Active Directory Domain Services.
3. Check if the Licensing Mode is correct.
- To change the Licensing Mode we can use RD Licensing diagnose, PowerShell cmdlet and Group Policy.
Via PowerShell cmdlet:
To change the licensing mode on RDSH/RDVH:
$obj = get-wmiobject -namespace "Root/CIMV2/TerminalServices" Win32_TerminalServiceSetting
$obj.ChangeMode(value)
# Value can be 2 - per Device, 4 - Per user
Via Group Policy
Path: Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Licensing
Use the specified RD license servers = FQDN of server name
Set the Remote Desktop licensing mode =
Per User
However, if issue persists, please provide detailed information and post the question in the
Remote Desktop Services (Terminal Services) forum.
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hi Richard,
You need to uninstall Remote desktop session host feature. After removing it, you will default two connections which does not need to purchase RD CALs'.
Thanks,
Umesh.S.K

Reader not showing pdf with long file names in IE8 for standard user

Hi,
I have this problem for standard users, that is, not Admin level. Admin level users have no problems.
If a web site opens up a pdf file with java, usually in a new window, and the file name is very long (I haven't figured out how long, but visually long) then the reader plug-in won't work and opens a blank page. If the file name is small then there is no problem, and reader opens the pdf without problem.
Interestingly, if I edit the document name (say for example the link has something on the end like "&Doc_Type=Statement" which is obviously not part of the document name but part of the SQL used to find the document by the web page) then reader will open the file no problem.
Again, this doesn't happen for Administrative level users.
Any ideas on how to fix?

I'll crosspost to the reader forum.
Yes, reader works in all other situations.

Can't change home directory for standard users (admin is OK)

I'm can't relocate home directories for standard users. Relocating works fine for admin users.
When a standard user logs in, they get a message (paraphased) saying "the home directory is not available. If it is located on a server, the server might not be online". If I change the standard user to admin, this message goes away, and everything is fine.
I created a standard user
moved the home directory using the terminal as root: mv UserName /otherlocation/UserName
I then went into users and groups, other options and changed the home directory location.
Rebooted, then tried to log in as the standard users.
Next try - Deleted the standard user and created the same user with admin rights. Followed the above steps and everything works fine.
I don't want this user to have admin rights on my system. Any ideas

Hi,
the AFP is has always been switched on. As for the path I believe this to be correct. The path I am using is:
afp://musicserver/Users
I'm not at the server right now so I mat have got the afp and : and / in the wrong order here but they are correct on the server.
This however does not seem to put the a folder in the Users folder. Could it be something to do with my external hard drive? I am using a Mac Mini as our server (not ideal but fine for us, or at least was) this is booted from our external hard drive. This is the main system drive which is where the Users data is also stored. I have tried all possible paths I can thing of from replacing the 'musicserver' with the IP address. I have also tried adding the name of the drive to the path (System) but all does not work.
Are you able to suggest anything I have missed? Perhaps I'm doing the path wrong?
Thanks again
Chris

Launching application in admin mode for standard users from start/menu

hi
i am currently working on an application which runs fine for admin users but for standard users it ask for admin user name and password. creating shim is not working. what will be the other option so that application can be run for standard users without
asking admin credentials?
thanks all

hi i am developing this application and we are deploying silently to some user's machine. Also i tried to use ACT and shim it as "Run as admin","Run as involker","Run as highest"but nothing works so far. so dont know which option to use. Any registry capture
would be good? or can i know how to apply shim?
I am following the route like
1) create the shim.
2) install application
3) run as standard user. or 1) install application 2) install shim 3) run as standard user.
Nothing works....
Thanks all

Remote Desktop Connection Server 2012 Clients only using on DC as Logon Server.

I am using Server 2012 and have an RDC Server running on a VM. Originally I had ordered the licensed version as Essentials was provided to me which does not allow for a full domain environment, which is required for the RDC server. Anyway, I
used Eval versions to get started, not thinking or realizing that the DC would never be able to get Activated since it is an Eval. So after 4 days I have finally, loaded Server 2012 on a new VM, promoted to DC, Transferred FSMO roles...DNS is up and
replicating across both DC's. The Eval keeps shutting off and was going to demote it and remove, but whenever it is shutdown the Clients receive a "No Logon Servers are available " error. I start up the old DC and it works. I doublechecked
all of the roles have been moved, I checked the RDC gateway, everything points to the same Domain information, but when I check an account using 'CMD set' it shows the old DC as the Logon Server. Is there something I am missing in the RD Gateway or somewhere
else. Is there a way to force it to use the new DC? I have tried setting the options in remote desktop connection to use a particular TS Gateway setting and it doesnt seem to work. Can someone please help me think about this and offer a
suggestion or let me know if you need more info. I can figure nothing else out at this point.
Thanks so much in Advance.
-T

it sounds like your clients / rdc servers may still be pointing to the old DC for DNS.
Can you check you have updated DNS on the clients to talk to your new domain controller.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
The new DC is the only DNS server listed on the RDC Server and is the only DNS listed for the clients other than the gateway which have as a secondary. If I change the static on the old DC I cannot login, as soon as I put it back, I can login and it
shows that DC as the logon server.
I did a simple recursive test on both DNS servers....The new Domain Controller passes, the Old One which I am trying to remove, does not.
I will reply with any other updates as I continue to look into this and thanks for the suggestions.
So I also Pinged the domain from the RDC Server as suggested and it replies back with the old DC IP.
Not sure why.

Remote desktop ....Waiting for the help(very urgent)

Please :
1)this is not related to SAP( business critical issue for me)
2)I know I should not place this in this forum.But no other go for me.
When Ever I have logged in to a remote desktop(through Citrix metaframe) ,there If
I press any key then the system itself treating it as "windows"+"Key that I have given".(for ex. If I have given key(this may be in a notepad or may be in a password field) like " l ".then I am simply logging out).
Because of this I am unable to enter into any system.(I need to login to SAP through that system only But I am unable).
Note:1)this problem is not with in our network
2)only when I have connected to my client network
3)I have tried with 2-3 desktops but no result(I mean problem is not with the system hardware)
4)I have tried with options like on the remote computer and full screen mode only(every thing I have checked but no use)
5)Last I have asked every known but no use.
I will be more tankful if any one of you can help me out.

ixed.
Seems simple now....
Just open On screen keyboard (By accessories->accessibility)and press windows key and then you will get the same problem(If at all you have closed the on screen keyboard also you can get the problem).to fix this press windows key again(in On-screen keyboard)(If at all this is not working for once then press for 3-4 times)...now you will not get the problem.
Thanks for your time.

Remote Desktop Service Manager - configure permissions for Remote Desktop Users to Send Message, Disconnect, Logoff

Hello, dear colleagues.
We are using Windows Server 2012 R2 as Remote Desktop Server. Also use Windows Server 2008 R2 with Remote Desktop Service Manager to control RDS user sessions (Send Message, Disconnect, Logoff, Query Info).
Send Message, Disconnect, Logoff options works only for users in Administrators group.
I can't to configure permissions for Remote Desktop Users, specific user or AD group.
To set permissions I'm running RDS Host Configuration on Windows Server 2008 R2 and connect to Windows Server 2012 R2. Then double-click
RDP-Tcp, Security tab, add specific user account , AD group or configure
advanced permissions
for Remote Desktop Users.
But, as I sad above, these options works only for users in Administrators group. How to make it work for Remote Desktop Users or specific user, AD group?
Thanks.
P.S. If move specific user from Remote Desktop Users group to Administrators group on
Windows Server 2012 R2 - it works.

Hi,
You can prevent administrators from changing the permissions for a connection by applying the
Do not allow local administrators to customize permissions Group Policy setting.
This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Apart there is one command with which you can set the permission for that check the related
article. Additionally checkthis
thread for more detail.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Qos DSCP value 46 gone, after enabling Remote Desktop Services on Windows 2012 R2 Standard

Hi,
After installing a clean Windows Server 2012 R2 with
all Windows updates I have setup Policy-Based QoS for tagging defined traffic,
in the test case all traffic to one specific ip address. Whireshark logging
displays the correct configured (46) dscp value so the group policy is
working fine. After installing Remote Desktop Services the Policy-Based QoS is
still in place but Wireshark results that the value is 0.
Can somebody explain why this happens and how to solve
it?
Regards, Edward

Hi Edward,
Thank you for posting in Windows Server Forum.
Did you find any related error for your case?
By default, Windows traffic has a DSCP value of 0. Network routers use the DSCP value to classify network packets and to queue them appropriately. The number of queues and their prioritization behavior needs to be designed as part of your organization's QoS
strategy. For example, your organization may choose to have five queues: latency-sensitive traffic, control traffic, business critical traffic, best effort traffic, and bulk data transfer traffic.
More information, please see:
Policy-based Quality of Service (QoS)
http://technet.microsoft.com/en-us/library/dd919203(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Remote Desktop not working on client after crash

I was installing the ARD Client along with some other OS upgrades on two client computers. My main ARD console was busy copying some files so I set up ARD to install the pkgs via the task server on another Mac. During the install my main ARD console crashed. Now the clients show up with the status that Screen sharing is allowed but they show the old version of the ARD client is installed. I manually installed the new ARD client but it still shows up on my console as the old version. Sometimes I can connect to the clients and sometimes I cannot. I can't do anything other than screen sharing and that is not working well either. I went to the client computer and stopped and started ARD through system preferences. When that didn't work I used the terminal command to kickstart ARD on the client. No change on the admin side. I've also noticed when I am able to connect to the client that it is constantly reconnecting to it like it is dropping the connection. I ran Activity monitor on the client and ARDAgent shows up there but keeps disappearing like its starting and stopping on its own. Has anyone had anything similar happen to them?

When I looked in this folder, I saw the "Client" folder with the red "no access" icon on it. I did a GetInfo and changed the permissions for this folder to include Administrators with read/write (why it wasn't already like this as I was logged into the server through ARD as admin [server is headless], I'll never know).
I propagated this perm changes down through the folder's children and all seems well. Its likely that because of the access issue, ARD could not initiate any connections (vnc://serverIP did not work either initially).
YMMV.

Set up extended mode multi displays using remote desktop session via thin client device

I am configuring a Dell WYSE T10 terminal device. I should be able to use 2 monitors in extended desktop mode, but can only get it to work in span mode. I attempted to use RDS on my windows 7 desktop with 2 monitors and connect to server (Server 2008),
and am getting the same issue. Am I missing a setting in the RDP configuration, or do I have a deeper issue?

Hi,
Open remote desktop connection, under display tab, check the option use all my monitors for the remote session.
Hope this helps.

Remote Desktop 2 with v3 clients

Can Remote Desktop 2 connect to v3 clients?
Thanks.
MacBook Pro Mac OS X (10.4.6)
MacBook Pro Mac OS X (10.4.6)

A version 3 client will look like a regular VNC client to an Apple Remote Desktop 2 admin. So you can control and observe it, but that is about it.
Hope this helps.
JvL

Using Remote Desktop Admin app in more than one user account.

Is possible to have the ARD admin app use the same database and settings over more than one user account?
eg. I have ARD setup on my Mac as I am in charge of our organisations Macs. However if I am away for a few weeks, one of our other techs would be able to turn on my Mac, log in to a generic account, open ARD and it would be set up exactly as I have it in my user account.
I know that I could manually set up ARD in the other account, but with the number of machines we have I would rather not have to re-enter all those admin passwords all over again, and then have to remember to update ARD in the other account everytime we get a new machine or make other changes.

In theory, you could simply copy the com.apple.RemoteDesktop.plist into the preferences folder of the other user. Then they would simply have to know the Remote Desktop Password (which is probably stored in your KeyChain.)
I've never tried this, but it seems like it would work.

Remote Desktop repeatedly installs ARD Client for standard users...

Similar Messages

Maybe you are looking for