dest:console not working

[Henrik]

Dear all,

i catch the console session on a 2k3 server with

mstsc.exe /console

and i give the stolen session back with

tscon 0 /dest:console

This works fine, but only with an administrator's session.
If a normal user is logged in the 2k3 server, i can hijack
the session, but can't give it back with the tscon
statement. If i try this i will get the message

tscon 0 /dest:console
sessionname console not found

Can anyone help me? I need this functionality with a
normal user log in. I think there is a problem with user
rights...

Please!

[Vera Noest [MVP]]

But is the user really running a console session?
What exactly are you trying to do?
Can't you simply shadow the user session?

http://support.microsoft.com/?kbid=320191

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

Post by Henrik
Dear all,
i catch the console session on a 2k3 server with
mstsc.exe /console
and i give the stolen session back with
tscon 0 /dest:console
This works fine, but only with an administrator's session.
If a normal user is logged in the 2k3 server, i can hijack
the session, but can't give it back with the tscon
statement. If i try this i will get the message
tscon 0 /dest:console
sessionname console not found
Can anyone help me? I need this functionality with a
normal user log in. I think there is a problem with user
rights...
Please!

[Henrik]

Thank you for your reply,

i should explain it more exactly. I have a normal user
logged in on a 2k3 server. The user runs some programs. If
such a program become unstable the user must restart this
programs. When the user is not on the desk the programs
mus still running. In case of an crashed program i have to
logged in the session (console) of that user and restart
the buggy things. After that i give the stolen session
back to user's screen with the command tscon
0 /dest:console.
The trouble is, that when i remove this user from the
Admins group this will not function. But the user can't be
member in Administrator group by security reasons.

Once again: no problem with an admin - only the half of
the functionality with a normal user.

I should point out that i have no licensed Terminal
Server, only the build in remote control function of the
OS. But i think this is a rights problem.(?)

Thank you for your help!

[Vera Noest [MVP]]

But once again the same question: does the user really work in the
console session (session 0)?
If the user starts a standard Remote Desktop connection, he runs
*not* in the console session, but in session 1, 2, or whatever.
You can check this in TS Manager.
You *only* run in a console session when you
a) log in to the physical console
b) connect through "mstsc /console"

You should anyhow not need the trick to redirect the session back,
you can simply use shadowing:

278845 - How to Connect to and Shadow the Console Session with
Windows Server 2003 Terminal Services
http://support.microsoft.com/?kbid=278845

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---

Post by Henrik
Thank you for your reply,
i should explain it more exactly. I have a normal user
logged in on a 2k3 server. The user runs some programs. If
such a program become unstable the user must restart this
programs. When the user is not on the desk the programs
mus still running. In case of an crashed program i have to
logged in the session (console) of that user and restart
the buggy things. After that i give the stolen session
back to user's screen with the command tscon
0 /dest:console.
The trouble is, that when i remove this user from the
Admins group this will not function. But the user can't be
member in Administrator group by security reasons.
Once again: no problem with an admin - only the half of
the functionality with a normal user.
I should point out that i have no licensed Terminal
Server, only the build in remote control function of the
OS. But i think this is a rights problem.(?)
Thank you for your help!

[a***@discussions.microsoft.com]

Thank you Vera,

yes, my user is on the physical console, so it should be 0.

Any idea?