Shadow only for Administrators?

Hi,
is it true, what if user needs to shadow other user session on Windows Server 2012 R2 RDS he needs to be a local Administrator on that Terminal?
If yes, maybe there are plans to change that?

Hi Billy,
Thank you for your posting in Windows Server Forum.
No, it’s not necessary to have administrator permission to shadow the other user account.
A user does not need to be an Administrator to shadow other sessions under Server 2012 R2 RDS.  You need to grant the non-admin user/group permissions to the RDP-Tcp listener on each RDSH server.  To do this, first create a security group in your
domain and add the users as members that you would like to have shadow permission.  Next log on to each 2012 R2 RDSH server, open an administrator command prompt, and enter the following command (substitute your domain and group name): (Quoted from below
thread-answered by TP)
wmic /namespace:\\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "domain\group",2
Source:
2012 R2 RDS Shadowing "Permissions"
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5e784267-c017-4afe-855a-fe7f5b9043fb/2012-r2-rds-shadowing-permissions?forum=winserverTS
Hope it helps!
Thanks.
Dharmesh Solanki

Similar Messages

  • Shadow Copy on 2012 R2 Only for Admins or dedicated Users

    Hi,
    is this possible? That only dedicated Users, or Admins are eligible to use Shadow Copy Restore?
    we have many home office users (not in Domain...) connected with VPN and they see the the right click and previos Versions.
    Now im Afraid that someone could set back the whole data directory a feew days back or more...
    would can be done?
    Shadow copy only for admins would be nice 

    there seems no such permission to control previous version...
    this may be helpful...
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/b78896ee-8364-4a02-a082-7f22e6417dc7/server-2008-and-shadow-copy-permissions?forum=winservergen
    Best,
    Howtodo

  • 1Z0-050  Oracle 11g New Features for Administrators

    Which release are the exam 1Z0-050 - Oracle 11g New Features for Administrators, release 1 or release 2?
    I need to study Oracle University Material Release 1 or Release 2?

    Hi,
    I have a question too.
    I am 10g certified and looking to take the 11g New Features For Administrators course in the new year.
    Previously when I certifed from 8i to 9i and then to 10g it was only required to take the exam and the course was optional although my company sends me anyway.
    Looking on Oracles website it seems to be that to do the 11g New Features you now have also have to attend another instructor led course. I have posted a link.
    http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getlppage?page_id=212&path=DBAU
    Can someone confirm if this is the case and that Oracle have changed the format of the New Features upgrade path,
    cheers

  • CRS-2630: Only cluster administrators are allowed to create local resources

    I have installed and configured a 12c database across two linux nodes and all is well. I have also installed the Oracle rdbms 12.1.01 on the same nodes. Now when I try and use netca or dbca to create a database or listener, I get the following errors;
    CRS-2630: Only cluster administrators are allowed to create local resources
    I can log in as the GRID user and can create resources but not as database user. Both users are members of the dba group.
    Any ideas anyone?  Thanks a lot H.

    The issue is resolved, the 12c configuration is a lot more comprehensive than 11g. Here we have to create the user DBA with the right rights to access and change the cluster resources.
    For example to allow the dba users the ability to create listeners on the RAC nodes, we have to issue some command such as follows; here the oedsdp is the dba user and ogridp is the grid main owner.
    t@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.rac1node.vip -u user:oedsdp:rwx
    [root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
    [root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
    [root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.rac2node.vip -u user:oedsdp:rwx
    [root@rac2node ~]# /oracle/grid/bin/crsctl setperm resource ora.net1.network -u user:oedsdp:rwx
    Interesting, I think we need to carefully plan the new user groups before we start the GRID configuration.
    H.

  • Enable Shadow Copies for Shared Folders in a Failover Cluster (2012 R2)

    I cannot find a reference on how to Enable Shadow Copies for Shared Folders in a Failover Cluster
    using separate disks for Data and Shadow Copies, using Windows Server 2012 R2.  I found an article for Server 2003, but that doesn't solve my issue. 
    Enable Shadow Copies for Shared Folders in a cluster.  Can someone point me to documentation on how to setup properly?
    I have a 3 server failover cluster, a single fileserver role with a 2 TB data storage drive and a 200 GB disk for shadow copy drive.  The 2 TB is ReFS and being used by Home Directories.  The 200 GB is also ReFS, but I didn't have a letter
    assigned, but it is associated with the fileserver role.
    Any help is appreciated.
    Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.

    As mentioned above I spotted Shadow Copy configuration problems in clustered environment on Windows 2012 R2 with latest updates.
    Enabling Shadow Copy via Cluster Manager on disk will enable schedule and snapshots but schedule is not-cluster aware (is created locally on node) and "Previous Versions" are visible only locally but not via shared folders (UNC path accesible by
    clients)
    When I spotted this behavior I tried different way going via Computer Management and cluster resource name but console always hangs for me when using "Configure Shadow Copies". After many minutes configuration window is opened (Hurray!) but any
    action there will hang whole console again. Enabling Shadow Copies will fail with "0x80004005: Unspecified
    error" for creating scheduled task but "Next Run Time" column still shows "Disabled". Checking disk resource via Cluster Manager shows it is enabled and ?local? scheduled task is created.
    Computer management console still shows DISABLED and any action freezes whole console (only when cluster resource name is used).
    This fix I found, unfortunately, is not applicable to 2012 R2 OS: https://support.microsoft.com/en-us/kb/2894464
    To sum up there is a major bug in MS implementation in Shadow Copies for Shared Folders when clustering is used or it is still not supported in 2012 R2? Doing it outside cluster works as it should (without freezes and Previous Versions are available via
    UNC)
    There is no documentation about FileServer Clustering on 2012(R2) unfortunately.
    Could someone from MS clarify it?
    Many thanks
    Filip
    EDIT:
    Ok, one correction:
    Scheduled task is not created in "Failover Clustering" hive of Scheduled tasks as user may expect but failover of fileshare to other node will unregister/reregister it on active node only.

  • ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition

    Hi,
    I am getting error "Access Denied" when my code tries to get "SPWebService.JobDefinition" with an AppPool account of content site. The same core runs correctly for the AppPool of CentralAdmin site.
    Lemme provide some background of the servers
    - We have multi-server FARM
    - WFE and APP servers are in different domains, there is one-way trust between the domains.
    - We have UAC (User Access Control) set as high on each server
    - My site is internet site
    Lines of Code are following
    SPWebServiceservice =
    SPWebService.ContentService
    varsyncTimerJob =
    fromSPJobDefinitionjob
    inservice.JobDefinitions
                       wherejob.Name
    == "MyJob"
    selectjob;
    I am running the above code with in SPSecurity.RunWithElevatedPrivileges so the above code is running with APP POOL account. I m getting
    the error in the 2nd line where I have a LINQ query. And I m assuming this is because of "service.JobDefinition" line. Can anyone help me?
    Detailed Error:
    An exception has occurred.   ExceptionType: 'TargetInvocationException'   ExceptionMessage: 'Exception has been thrown by the target of an invocation.'   StackTrace: ' 
    at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)     
    at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)     
    at Microsoft.SharePoint.Administration.SPAutoSerializingObject.GetInstanceFromType(Type type, String typename)     
    at Microsoft.SharePoint.Administration.SPPersistedObject.GetInstance(XmlNode xml, Guid classId, Boolean bResolveMissingTypes)     
    at Microsoft.SharePoint.Administration.SPFileSystemCache.FetchObjectFromFileSystem(Guid id)     
    at Microsoft.SharePoint.Administration.SPFileSystemCache.GetValue(Guid id)     
    at Microsoft.SharePoint.Administration.SPCache`2.get_Item(K key)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id, Boolean checkInMemoryCache, Boolean checkFileSystemCache)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id)     
    at Microsoft.SharePoint.Administration.SPConfigurationDatabase.Microsoft.SharePoint.Administration.ISPPersistedStoreProvider.GetObject(Guid id)     
    at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.get_Item(Guid objId)     
    at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.<GetEnumeratorImpl>d__0.MoveNext()     
    at System.Linq.Enumerable.WhereEnumerableIterator`1.MoveNext()     
    at System.Linq.Enumerable.Count[TSource](IEnumerable`1 source)     
    at Project1.SharePoint.Common.UtilityHelper.IsSyncSchedulingDisabled(StringBuilder logMessage)'   Source: 'mscorlib'   TargetSite: 'System.Object InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)'   ------------------------------------------------------------  
    Inner exception:   ------------------------------------------------------------    ExceptionType: 'SecurityException'    ExceptionMessage: 'Access denied.  Only machine administrators are allowed to create administration
    service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition, Microsoft.TeamFoundation.SharePoint.WebAccess, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a.'    StackTrace:
    at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType)      
    at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer,
    Microsoft.SharePoint.Administration.SPJobLockType)'
    Any help will be appreciated.

    The bottom of your stack trace begs to differ:
    at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'   
    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer, Microsoft.SharePoint.Administration.SPJobLockType)'
    Scott Brickey
    MCTS, MCPD, MCITP
    www.sbrickey.com
    Strategic Data Systems - for all your SharePoint needs

  • Custom L&F with Shadow effect for Menus & Tooltips

    Hai friends !
    I want to design a custom look and feel with shadow effect for menus
    and tooltips. Pls help me....
    I tried following but..
    i) Extended abstract border....
    ii)Extends ColorUIResource to support "alpha"
    iii)setOpaque(false) in installUI() method
    Event hough I used transperent color for border the underlying color of
    component is displaying at the corners.

    I don't think there's anything you can do with the Tooltips, because the only methods I see that have to do with the tooltips are setTooltipText and getTooltipText..
    But, you can do transparent borders, and here's some code that shows you how to do it. This doesn't do exactly what you want, but you should be able to get there.
    import javax.swing.*;      
    import javax.swing.border.*;  
    import java.awt.*;
    public class BorderTest extends JFrame {
       JPanel panel;
       JButton buttona;
       JButton buttonb;
       public BorderTest () {
          super("BorderTest");
          panel    = new JPanel();
          buttona  = new JButton("TransBorder");
          buttonb  = new JButton("NonTransBorder");
          getContentPane().add(panel);
          panel.setLayout(new GridLayout(0, 2));
          panel.add(buttona);
          panel.add(buttonb);
          panel.setBackground(Color.red);       
          // these two buttons are both blue, but the one with the transparent
          // border ends up looking somewhat purple.
          buttona.setBorder(new TransBorder());
          buttonb.setBorder(new TransBorder(Color.blue));
          setDefaultCloseOperation(EXIT_ON_CLOSE);
          setBounds(0, 0, 300, 300);
       private class TransBorder extends AbstractBorder {    
          Color transColor;
          public TransBorder() {
             super(); 
             transColor  = new Color(0, 0, 255, 100);  // transparent blue
          public TransBorder(Color c) {
             super(); 
             transColor  = c;
          public Insets getBorderInsets(Component c) {
             return new Insets(3, 3, 3, 3);
          public Insets getBorderInsets(Component c, Insets i) {
             return getBorderInsets(c);
          public void paintBorder(Component c, Graphics g, int x, int y, int w, int h) {
             g.setColor(transColor);
             g.fillRect(x, y, w, h);
       public static void main(String[] args) {
          BorderTest bt  = new BorderTest();
          bt.setVisible(true);
    }Hope this helps.
    Eric

  • Illustrator CS3; creating an outline around a shadow only

    I am working with illustrator CS3 and and trying to figure out how to go about creating a outline for a drop shadow only. I know how to create the drop shadow and apply it to the selected work but when I want to add another stroke it wants to add it to the letters and to the outline and it adds small lines in between connecting the two. Any help would be greatly appreciated. Thanks

    PLease upload a screenshot including the appearance panel with the appearances shown

  • Difference between PT 8.53 and PT 8.52 for administrators

    HI
    I am working on Upgrade project. We have not started it yet. we are planing to upgrade from PT8.52 to PT 8.53. Can anyone provide me the link where I can get what are the new features added in PT8.53 as an administrators point of view. I have tried searching it but I did not find it for administrators.
    Thanks in Advance

    If you looking for Tools 8.53 documentation please go to
    Oracle's PeopleSoft PeopleTools 8.53 Documentation Home Page (Doc ID 1494462.1)
    If you looking for more information about Tools only upgrade see the following article:
    Information Center: PeopleTools Only Upgrade, Chapter by Chapter (Doc ID 1471660.2)
    And course do not forget about the community pages

  • I have a game but it only for one apple id and one divece but someone i dont know id play that game and using my apple id and i want to know if u can block them from using ur apple id and also erase all the games they downlode with the apple id

    I have a game but it only for one apple id and one divece but someone i dont know id play that game and using my apple id and i want to know if u can block them from using ur apple id and also erase all the games they downlode with the apple id

    There probably is, but it requires that you be able to use punctuation and write in sentences so that we can understand exactly what you want.
    You can block others from using your Apple ID by changing your password.  There is no way to erase what was already downloaded on to someone else's device, for obvious reasons,

  • SRM Classic - Automatic PO creation in R/3 only for PReqs based on catalogs

    Dear Experts,
    in SRM 7.0 Classic Scenario, i am facing the following question w.r.t. automatic PO creation on the R/3 side:
    Is it possible to have automatic PO creation in R/3 only for those purchase requisition items, that are based on shopping cart items from a third party punch out catalog?
    The idea is, that the requisitioner on the SRM EBP side shops in a catalog. Once the the SC is approved and the purchase requisition is created in the R/3 system, automatically a PO should be created based on that PReq. This would save the time for the buyer, who do not need to pay attention to this document, because the purchase from the catalog guarantees the buyer, that the already pre-agreed conditions are getting applied.
    But PReqs that are based on Free Text shopping cart EBP items must not be taken into account for the automatic PO creation.
    Is there a way to distinguish between the catalo-based and the non-catalog based PReq positions?
    Thank you.

    Hello Ashutosh,
    thank you very much for that idea!
    I would have the following question w.r.t. to such configuration:
    If i configure that the PO creation for complete SC should happen for a certain purchasing group, would it be somehow possible to arrange that when a Catalog item is put into the shopping cart, that only that certain purchasing group gets defaultet? (the idea behind this is, to leave the free text shopping carts to already known purchasing groups and to keep the purchase requisition as the backend object for this configuration. And additionally to create new purchasing groups, that should be linked to the catalog purchases and to POs as the backend objects).
    Thanks again for the help!

  • Automatic PO creation - only for PRs based on catalog SRM/EBP items

    Dear Experts,
    i am facing the following question w.r.t. automatic PO creation:
    Is it possible to have automatic PO creation in R/3 only for those purchase requisition items, that are based on shopping cart/EBP/SRM items that are from a third party punch out catalog?
    The idea is, that the requisitioner on the SRM EBP side shops in a catalog. Once the the SC is approved and the purchase requisition is created in the R/3 system, automatically a PO should be created based on that PReq. This would save the time for the buyer, who do not need to pay attention to this document, because the purchase from the catalog guarantees the buyer, that the already pre-agreed conditions are getting applied.
    But PReqs that are based on Free Text shopping cart EBP items must not be taken into account for the automatic PO creation.
    Is there a way to distinguish between the catalog-based and the non-catalog based PReq positions?
    Thank you.

    Auto PO transaction ME59N comes with huge selection crieteria. If you can distinguish between catelog vs non catalog requisition then it very easy to set up variant to filter non catalog based requistion. you can also think about ehnacement of polulating text fields like Requisitioner or Requirement tracking number  with unque idetifier  in case of non catalog based PR then you can set variant to filter out those requistions..

  • My iPhone was stolen a few days ago. It appears to be offline on the Find My iPhone app. If the person who has it turns it on only for a brief moment and then turns it off immediately, will the location still be found? Once it returns to be

    My iPhone was stolen a few days ago. It appears to be offline on the Find My iPhone app. If the person who has it turns it on only for a brief moment and then turns it off immediately, will the location still be found? Once it returns to being offline will the location still be sent to me? And also, how can I retrieve my pictures from my iCloud?

    Anything is possible.

  • [CC] How to perform a script "foo_beforeSave.htm" only for specific site?

    Since a long time I use a script for automatic text replacements which perform with each save command.
    The script sits in that folder:
    C:\Users\myusername\AppData\Roaming\Adobe\Dreamweaver CC\de_DE\Configuration\Commands\foo_beforeSave.htm
    It works for all documents of all sites.
    The source code (the regex rule is just an example) of the script you find below.
    My question:
    I like to perform a script like this only for a specific site.
    I'm not a programmer. So I don't know where to place the script to reach that target. Or how I have to edit the source code of the script.
    Is there anybody who could help me with that please?
    I would appreciate it a lot. Thanks
    <!DOCTYPE HTML SYSTEM "-//Macromedia//DWExtension layout-engine 5.0//dialog">
    <!-- MENU-LOCATION=NONE -->
    <html>
    <head>
    <title></title>
    <script src="../Shared/Common/Scripts/dwscripts.js"></script>
    <script>
    function canAcceptCommand(){
        return true;
    function getFileName(url) {
      var index = url.lastIndexOf('/');
      if (index != -1) retVal = url.substring(index + 1);
      else retVal = url;
      return retVal;
    function runCmd(){
        var dom = dw.getDocumentDOM();
        dom.synchronizeDocument();
        var path = dw.getDocumentPath('document');
        if(getFileName(path) != 'foo_beforeSave.htm'){
            var docEl = dom.documentElement;
            var tempDoc = docEl.outerHTML;
            tempDoc = tempDoc.replace(/&bdquo;/g,'„');
            tempDoc = tempDoc.replace(/&#8222;/g,'„');
            tempDoc = tempDoc.replace(/&ldquo;/g,'“');
            tempDoc = tempDoc.replace(/&#8220;/g,'“');
            tempDoc = tempDoc.replace(/&rdquo;/g,'”');
            tempDoc = tempDoc.replace(/&#8221;/g,'”');
            docEl.outerHTML = tempDoc;
    </script>
    </head>
    <body onLoad="runCmd();">
    </body>
    </html>

    Well, the posted script is a full working one.
    I just search for a way to limit the range of the script to the actual site.
    Therefore it is unimportant, which regex is in the example.

  • SRM 4.0- How to set the default values for product type (01) only for SC

    The radio button “Service” should not be visible.
    Also for search help (e.g. search for internal products) where a search should only be possible for product type 01 (goods). The system should not display the product type and internally always search for goods only.
    How to set the default values for product type (01) only for SC
    We needs to use Search help BBPH_PRODUCT which having parameter PRODUCT_TYPE
    Here we can set defalut value 01 but it is not correct one since same search help is using several places.
    We need to limit the search help results only for SC.
    Kindly help out me ASAP.

    The easiest way to set defautl values is to edit the batch class.
    Goto the characteiristic and go to update values.
    In here you probably have something like 0 - 100 as a spec range.
    On the next line enter the default value within this range.  At the end of the line, click in the box in the column labelled "D".  This indicates the defautl value for the characteristic.
    If you need to you can do this in the material classification view as well.
    Just to be clear, these values will only show up in the batch record.  You can not have defautl values in resutls recording screens.
    FF

Maybe you are looking for