(Remote Installation Services)

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

[TerminalServices]

The [TerminalServices] section contains entries for configuring Terminal Services features (Terminal Server and Remote Desktop) in Windows XP and Windows Server 2003.

Terminal Server applies only to Windows Server 2003, Enterprise Edition, Windows Server 2003, Datacenter Edition, and the 64-bit editions of Windows Server 2003.

To install and enable Terminal Server (also called Terminal Services in Application Server mode in Windows 2000), use the TerminalServer entry in the [Components] section. To change the permissions settings for a Terminal Server installation, use the PermissionsSetting entry in the [TerminalServices] section.

Windows XP Professional and Windows Server 2003 install Remote Desktop (also called Terminal Services in Remote Administration mode in Windows 2000), but disable this feature by default for security reasons. To enable Remote Desktop during unattended installation, use the entry AllowConnections = 1. Windows XP Home Edition does not provide the Remote Desktop feature.

Answer File Entries for the [TerminalServices] Section

Entry Description

AllowConnections

Specifies whether Remote Desktop (also called Terminal Services in Remote Administration mode in Windows 2000) enables connections from other computers.

LicensingMode

Configures how Terminal Services manages its Client Access Licenses (CALs).

PermissionsSetting

Enables administrators to choose the security mode for Terminal Server users during terminal server sessions.

AllowConnections

Specifies whether Remote Desktop (also called Terminal Services in Remote Administration mode in Windows 2000) enables connections from other computers.

Syntax
AllowConnections = 0 | 1
Value Description

0

Disables Remote Desktop on the computer.

1

Enables Remote Desktop during unattended installation.

Example
[TerminalServices]
AllowConnections = 1
Comments

The default value is 0.

Windows Server 2003 installs Remote Desktop and enables it by default. If you use the entry TerminalServer = On in the [Components] section of the answer file, the entry AllowConnections = 0 installs Terminal Server without enabling it.

Windows XP Professional and Windows XP Home Edition install the Remote Desktop feature by default but do not enable it.

LicensingMode

Configures how Terminal Services manages its Client Access Licenses (CALs).

Syntax
LicensingMode = PerDevice | PerUser
Value Description

PerDevice

Configures Terminal Server to require that each connected device has a valid Terminal Server CAL. If the client has a Terminal Server CAL, it can access more than one Terminal Server.

PerUser

Configures Terminal Server to provide one Terminal Server CAL for each active user.

Example
[TerminalServices]
LicensingMode = PerUser
Comments

The default value is PerDevice.

Setup ignores LicensingMode unless you enable Terminal Server. For more information, see the “TerminalServer” entry in the section “[Components].”

PermissionsSetting

Enables administrators to choose the security mode for Terminal Server users during terminal server sessions.

Syntax
PermissionsSetting = 0 | 1
Value Description

0

Grants Terminal Server users the same permissions as the users of Windows 2000, Windows XP, or Windows Server 2003. Note that some applications written for Windows NT 4.0 or earlier operating systems might not run correctly in this security mode.

1

Grants Terminal Server users the same permissions as the users of Terminal Server 4.0. Users can continue running previous application versions that might require additional user permissions. Note, however, that using this value bypasses some of the security enhancements in Windows XP and Windows Server 2003, and grants users access to critical registry and system file locations.

Example
[TerminalServices]
PermissionsSetting = 1
Comments

The default value is 0.

By default, Setup enables Terminal Server in Full Security mode, which grants Terminal Server users the same permissions as members of the User group and provides the most secure environment in which to run applications. However, some applications not certified for Windows XP or Windows Server 2003 require write access to certain parts of the predefined registry key HKEY_Local_Machine and to certain system directories. Granting these additional permissions might enable users to delete or change vital settings under HKEY_Local_Machine or system files.

Setup ignores PermissionsSetting unless you enable Terminal Server. For more information, see the “TerminalServer” entry in the section “[Components].”