Enable Remote Desktop

Enable Remote Desktop

Updated: January 9, 2009

Applies To: Windows Server 2008, Windows Server 2008 R2

You can use this procedure to enable Remote Desktop on the server that you are installing as a domain controller so that service administrators can manage the domain controller remotely. Remote Desktop is disabled by default in Windows Server 2008.

You can enable Remote Desktop on the Windows Server 2008 server directly, or you can enable it remotely from another server or workstation computer.

Membership in local Administrators, or equivalent, is the minimum required to complete these procedures if Active Directory Domain Services (AD DS) is not installed. Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure if AD DS is installed. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (http://go.microsoft.com/fwlink/?LinkId=83477).

To enable Remote Desktop locally by using Server Manager

Open Server Manager. To open Server Manager, click Start, point to Administrative Tools, and then click Server Manager.
In Computer Information, click Configure Remote Desktop.
In the System Properties dialog box, under Remote Desktop, click one of the following options:
- Allow connections from computers running any version of Remote Desktop (less secure). Use this option if you do not know the version of Remote Desktop Connection that will be used to connect to this server.
- Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure). Use this option if you know that the users who will connect to this server are running Windows Vista or Windows Server 2008.
Review the information in the Remote Desktop dialog box, and then click OK twice.

To enable Remote Desktop remotely by using the registry

On any computer that is running a version of Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows XP Professional, or Windows Vista, open Regedit as an administrator. To open Regedit as an administrator, click Start, and then, in Start Search, type regedit. At the top of the Start menu, right-click regedit, and then click Run as administrator. In the User Account Control dialog box, provide Domain Admins credentials, and then click OK.
On the File menu, click Connect Network Registry.
In the Select Computer dialog box, under Enter the object name to select, type the computer name, and then click Check Names.
After the computer name resolves, click OK.
In the computer node that appears in the Registry Editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server.
In the console tree, click Terminal Server, and then, in the details pane, double-click fDenyTSConnections.
In the Edit DWORD Value box, in Value data, type 0, and then click OK.

This value enables connections at the level that allows connections from computers running any version of Remote Desktop.

To implement the change, restart the server remotely, as follows:

Open a Command Prompt as an administrator: On the Start menu, right-click Command Prompt, and then click Run as administrator. In the User Account Control dialog box, provide Domain Admins credentials, and then click OK.
At the command prompt, type the following command, and then press ENTER:

shutdown /m \\<DomainControllerName> /r

Value	Description
/m \\<DomainControllerName>	The name of the computer to be shut down or restarted.
/r	Shuts down and then restarts the computer.

Tags

: Add a tag

Community Content

Add new content

Annotations

I have done all this and still can not RDP onto this server

DanielDeCoursey ... Thomas Lee | Edit | Show History

Do we not get our standard 2 managerial RDP sessions like server 2003? I am being aked to do a bunch of extra config stuff here like specifying license servers and such...... I wonder why all these new "extra steps" arent documented here in this thread?

[tfl - 25 01 12] Hi - and thanks for your post. Community content is not the appropriate place for technical support queries. Instead,
you should visit the Technet Forums at http://forums.microsoft.com/technet, where such posts are welcomed and where you stand a much
better chance of getting your query resolved. Sorry if that's not the answer you wanted to hear.

Tags

: Add a tag

Flag as ContentBug

It does not work

James MacLaren ... Thomas Lee | Edit | Show History

I have done all that is stated in here and Terminal Server for Admin purposes does not work. Microsoft, what is the deal. This is a major bug.

[tfl - 25 01 12] Hi - and thanks for your post. Community content is not the appropriate place for technical support queries. Instead,
you should visit the Technet Forums at http://forums.microsoft.com/technet, where such posts are welcomed and where you stand a much
better chance of getting your query resolved. Sorry if that's not the answer you wanted to hear.

Tags

: Add a tag

Flag as ContentBug

Firewall changes are most likely required

NeverEatAlone | Edit | Show History

HKLM\System\CCS\services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPort

3389:TCP:*:Enabled:RemoteDesktop

Now modify 'Enabled' to 'Disabled'

HKLM\System\CCS\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPort

3389:TCP:*:Enabled:RemoteDesktop

Now modify 'Enabled' to 'Disabled'

Tags

: Add a tag

Flag as ContentBug

Followed all of the steps

giojohn | Edit | Show History

I followed all the steps and still can't connect remotely into the server nor can I just remote to a client that is WIN 7 64 Pro. This task should not be this difficult MS.

Tags

: Add a tag

Flag as ContentBug

Additional resources for this information

Kurt L Hudson | Edit | Show History

These instructions are also covered other places:

Remotely Enable Remote Desktop on Windows Server 2003

http://www.petri.co.il/remotely_enable_remote_desktop_on_windows_server_2003.htm

Enable Remote Desktop

http://technet.microsoft.com/en-us/library/cc782195(WS.10).aspx

Remote Desktop Connection

http://technet.microsoft.com/en-us/library/cc781938(WS.10).aspx

Tags

: Add a tag

Flag as ContentBug