Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Changes to remote administration in Windows Server 2008


INTRODUCTION

This article describes the differences between Windows Server 2003 and Windows Server 2008 or Windows Server 2008 R2 when you use the Remote Desktop Connection (RDC) client to remotely connect to the server for administrative purposes.

↑ Back to the top


Changes to remote administration in Windows Server 2008 and Windows Server 2008 R2

In Windows Server 2003, you can start the RDC client (Mstsc.exe) by using the /console switch to remotely connect to the physical console session on the server (also known as session 0). In Windows Server 2008 or Windows Server 2008 R2, the /console switch has been deprecated. For more information, see the “Why the /console switch is no longer needed” section. In Windows Server 2008 and Windows Server 2008 R2, session 0 is a noninteractive session that is reserved for services.

You can use the new /admin switch to remotely connect to a Windows Server 2008-based server for administrative purposes. The /admin switch is introduced in RDC 6.1. RDC 6.1 is included in the following operating systems:
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows Vista Service Pack 1 (SP1)
  • Windows XP Service Pack 3 (SP3)

↑ Back to the top


Note RDC 6.1 (6.0.6001) supports Remote Desktop Protocol (RDP) 6.1.

RDC 6.1 does not support the /console switch. However, for backward compatibility, you can use the /admin switch to connect to the physical console session on a Windows Server 2003-based server. For example, to connect from a Windows Vista SP1-based client to the physical console session of a Windows Server 2003-based server, run the mstsc.exe /admin command.

If you try to use the /console switch together with the RDC 6.1 client, the behavior is as follows.
ScenarioBehavior
You type mstsc.exe /console at the command prompt, and then you connect to a remote server that does not have Terminal Server installed.The /console switch is silently ignored. You will be connected to a session to remotely administer the server.
For more information about the Windows Server 2008 or Windows Server 2008 R2 behavior, see the "When you connect to a server that does not have Terminal Server installed" section.
You type mstsc.exe /console at the command prompt, and then you connect to a remote server that has Terminal Server installed.The /console switch is silently ignored. You will be connected to a standard Remote Desktop session that requires a Terminal Services client access license (TS CAL).
In the RDC client UI, you specify Computer_name /console in the Computer box, and then you click Connect.

Note Computer_name represents the name of the remote computer to which you want to connect.
You receive an “An unknown parameter was specified in computer name field" error message.
In the .rdp file, you specify /console in the full address property, and then you try to start the Remote Desktop connection.You receive an "An unknown parameter was specified in computer name field" error message.
In the .rdp file, you specify the connect to console property, and then you start the Remote Desktop connection.The property is silently ignored. You will be connected to a session that requires a TS CAL.
You programmatically call the put_ConnectToServerConsole function or the get_ConnectToServerConsole function of the IMsRdpClientAdvancedSettings interface.The function fails, and it returns an S_FALSE value.

Why the /console switch is no longer needed



In Windows Server 2003, you use the Mstsc.exe /console command to start a Remote Desktop session for the following reasons:
  • To connect to session 0
    Some applications are installed and run only in session 0. This is because the applications have to communicate with services that run in session 0 or because the applications have to display user interface (UI) elements that are displayed in session 0.
  • To connect back to an existing session on the physical console
    Because the physical console session in Windows Server 2003 is always session 0, the only way that you can reconnect to this session is by using the /console switch.


In Windows Server 2008 and Windows Server 2008 R2, the /console switch functionality is no longer needed for the following reasons:
  • Improved application compatibility guarantees that legacy applications that have to communicate with services in session 0 will be installed and run in sessions other than session 0. Additionally, if the service that is associated with an application tries to display UI elements in session 0, a built-in capability in Windows Server 2008, Windows Server 2008 R2 and in Windows Vista enables you to view and to interact with the session 0 UI from your session. Windows Server 2008/Windows Server 2008 R2 session 0 is a noninteractive session that is reserved for services. Therefore, there is no need for you to explicitly connect to this session.

    Note For more information about session 0 isolation in Windows Vista, view the "Impact of Session 0 Isolation on Services and Drivers in Windows Vista" topic on the following Microsoft Web site:
  • Because the physical console session is never session 0, you can always reconnect to your existing session on the physical console. The Restrict Terminal Services users to a single remote session Group Policy setting determines whether you can connect to your existing physical console session. This setting is available in the Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Terminal Server\Connections node of the Local Group Policy Editor. You can also configure this setting in Terminal Services Configuration. The Restrict each user to a single session setting appears in Edit settings in the General section.

How the /admin switch behaves



You can run the RDC 6.1 client (Mstsc.exe) together with the /admin switch to remotely administer a Windows Server 2008-based server that has or does not have Terminal Server installed. However, if you are trying to remotely administer a Windows Server 2008-based server that does not have the Terminal Server role service installed, you do not have to use the /admin switch. In this case, the same connection behavior occurs with or without the /admin switch. At any point in time, there can be two active remote administration sessions. To start a remote administration session, you must be a member of the Administrators group on the server to which you are connecting.

When you connect to a server that does not have Terminal Server installed

If a member of the Administrators group starts a Remote Desktop session to a Windows Server 2008-based server that does not have the Terminal Server role service installed, the following conditions are true for the remote administration session:
  • Time zone redirection is disabled.
  • Terminal Services Session Broker (TS Session Broker) redirection is disabled.
  • Plug and Play device redirection is disabled.
  • The remote session theme is changed to Windows Classic.
  • Terminal Services Easy Print is disabled.

When you connect to a server that has Terminal Server installed

If a member of the Administrators group starts a Remote Desktop session to a Windows Server 2008-based server that has the Terminal Server role service installed, they must use the /admin switch to connect to a session to remotely administer the server. The following conditions are true for the session:
  • You do not have to have a TS CAL to remotely administer a terminal server.
  • Time zone redirection is disabled.
  • Terminal Services Session Broker redirection is disabled.
  • Plug and Play device redirection is disabled.
  • The remote session theme is changed to Windows Classic.
  • Terminal Services Easy Print is disabled.

Changes to APIs


If you are using RDC 6.1, you can no longer use the ConnectToServerConsole property of the IMsRdpClientAdvancedSettings interface to specify whether the Remote Desktop ActiveX control should try to connect to the server for administrative purposes. Instead, you must use the ConnectToAdministerServer property of the IMsRdpClientAdvancedSettings6 interface to connect to one of the following sessions:
  • The physical console session on a Windows Server 2003-based computer
  • The session that is used for administrative purposes on a Windows Server 2008-based computer

For more information about the ConnectToServerConsole property, visit the following Web site:
For more information about the ConnectToAdministerServer property, visit the following Web site:

↑ Back to the top


Keywords: kb, kbexpertiseadvanced, kbhowto, kbinfo

↑ Back to the top

Article Info
Article ID : 947723
Revision : 4
Created on : 8/20/2020
Published on : 8/20/2020
Exists online : False
Views : 159