Remote Desktop Services permissions are used to control which users or groups can perform particular tasks on the Remote Desktop Session Host (RD Session Host) server, such as remotely controlling a user session.
You can manage permissions on a per connection basis in Remote Desktop Session Host Configuration. The permissions are listed on the Security tab in the Properties dialog box for the connection.
The connection permissions that are set in Remote Desktop Session Host Configuration determine the actions that a given user can perform in Remote Desktop Services Manager. For example, a user must have at least the Remote Control special access permission in order to remotely control a user session by using Remote Desktop Services Manager.
The following is a list of some of the special permissions that you can set in Remote Desktop Session Host Configuration and the capability that each level of permission provides.
| Permission | Capability |
|---|---|
Query Information |
Query sessions and RD Session Host servers for information. |
Remote Control |
View or actively control another user's session. |
Logon |
Log on to a session on the RD Session Host server. |
Logoff |
Log off a user from a session. |
Message |
Send a message to a user session. |
Connect |
Connect to another user session. |
Disconnect |
Disconnect a user session. |
For more information about setting permissions in Remote Desktop Session Host Configuration, see the topic "Configure Security Settings for Remote Desktop Services Connections" in the Remote Desktop Session Host Configuration Help in Windows Server 2008 R2.