Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Allow Non-Admin User to Shadow a Session
- Thread starter vbc22
- Start date
- Thread starter
- #3
pgaliardo
MIS
- Nov 30, 2004
- 887
We're on 4.5, so I'm doing this from memory,with the help of some old documentation so it may not be exact.
First, I would create a group. Then you only need to add the users to the group.
To configure shadow permissions:
I think in XP, it's the following:
Start-Programs-Citrix-Metaframe XP-Citrix Connection Configuration
Highlight ica-tcp
Go to Security-Permissions. This should bring up a regular Windows Security Screen with a list of groups and users. Click ADD and choose the group you created above.
After the group is added, click the Advanced button, double click the group you created which should bring up a permissions screen. At the least, make sure there is a check box under the allow column for Shadow.
Log into the Management Console
CLick Policies
Double Click Shadowing This will bring up a Shadowing Properties box
CLick the plus sign next to shadowing
Click Assign Shadowing Permissions
If the group does not show up in the window of configured users, click Configure to add the Shadow Group you created
First, I would create a group. Then you only need to add the users to the group.
To configure shadow permissions:
I think in XP, it's the following:
Start-Programs-Citrix-Metaframe XP-Citrix Connection Configuration
Highlight ica-tcp
Go to Security-Permissions. This should bring up a regular Windows Security Screen with a list of groups and users. Click ADD and choose the group you created above.
After the group is added, click the Advanced button, double click the group you created which should bring up a permissions screen. At the least, make sure there is a check box under the allow column for Shadow.
Log into the Management Console
CLick Policies
Double Click Shadowing This will bring up a Shadowing Properties box
CLick the plus sign next to shadowing
Click Assign Shadowing Permissions
If the group does not show up in the window of configured users, click Configure to add the Shadow Group you created
- Thread starter
- #5
Hi...
I followed all your steps...thank you very much.
However, logged in as a member-user of the group you instructed to created did not allow me to shadow another user.
Something that I am missing?
The shadow session window opens, but when I click on the tree view to select users or servers, nothing comes up so I cannot shadow anyone.
Using tsadmin.exe (terminal services) does not allow me to shadow either. Error 5, access denied is the reason.
I followed all your steps...thank you very much.
However, logged in as a member-user of the group you instructed to created did not allow me to shadow another user.
Something that I am missing?
The shadow session window opens, but when I click on the tree view to select users or servers, nothing comes up so I cannot shadow anyone.
Using tsadmin.exe (terminal services) does not allow me to shadow either. Error 5, access denied is the reason.
- Thread starter
- #6
Also...in the Citrix Connection Configuration window, after clicking Apply and closing the ICA-TCP Permissions dialog, I get the following message:
Configuration changes ahve been made to teh system registry; however, the user sessions now active on 'ica-tcp' Connections will nto be changed.
What does this mean?
Any help would be greatly appreciated.
Configuration changes ahve been made to teh system registry; however, the user sessions now active on 'ica-tcp' Connections will nto be changed.
What does this mean?
Any help would be greatly appreciated.
vbc22,
This just means that any active connections that were on the server while making this change...will not take the new ICA connection configuration.
But any new incoming connections will have the ICA connection configuration.
The users that were connected while making this change would simply have to log off and log back on so their ICA connection will get the new setting.
Hope that helps.
This just means that any active connections that were on the server while making this change...will not take the new ICA connection configuration.
But any new incoming connections will have the ICA connection configuration.
The users that were connected while making this change would simply have to log off and log back on so their ICA connection will get the new setting.
Hope that helps.
- Thread starter
- #8
- Status
Similar threads
- Question
- Locked
- Question