send message regular user

Question

We have a new rds 2019 session host.
On our old 2008 r2 session host users where able to message each other using taskmanager.
The permission to allow this was set in the session host configuration on the rdp-tcp listener.

However in server 2019 there is no longer a session host configuration tool.
Currently only admins are able to send messages via task manager.
Is there a way this permission can still be set for the users?

Answer 1

Hi,

I have done some further investigation. Please try if you could run below command in powershell or CMD.

wmic /namespace:\root\CIMV2\TerminalServices PATH WIN32_TSPermissionsSetting.TerminalName="RDP-TCP" call ModifyPermissions "Remote Desktop Users", 7
Or
wmic /namespace:\root\CIMV2\TerminalServices PATH WIN32_TSAccount.TerminalName="RDP-TCP" call ModifyPermissions "Remote Desktop Users", 7
Or
wmic /namespace:\root\CIMV2\TerminalServices PATH WIN32_TSAccount.TerminalName="RDP-TCP",AccountName="BUILTIN\Remote desktop users" call ModifyPermissions, 7

Thanks,

Eleven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

Hi,

You may use WMI to change the rdp-tcp permissions.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/add-user-services-rdp-permissions
https://learn.microsoft.com/en-us/windows/win32/termserv/win32-tsaccount-modifypermissions

But the namespace should be :\root\CIMV2\TerminalServices in server 2019.
So, the command should be wmic /namespace:\root\CIMV2\TerminalServices PATH WIN32_TSPermissionsSetting.TerminalName="RDP-TCP" call AddAccount "Domain\user",X

Domain\User: Target domain and account (user or group) to which permissions are to be granted. For local accounts, replace Domain\User with only User, where User is a local account on the computer on which you're running the command.
X: The type of access to be granted:
0 = WINSTATION_GUEST_ACCESS
1 = WINSTATION_USER_ACCESS
2 = WINSTATION_ALL_ACCESS

I also found one tool that can adjust RDP Permissions - RDSConfig.
https://purerds.org/remote-desktop-free-tools/adjust-rdp-permissions-brand-new-free-tool/
Please Note: The third-party product discussed here is manufactured by a company that is independent of Microsoft. We make no warranty, implied or otherwise, regarding this product's performance or reliability.

Hope the information helps.

Thanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 3

HI Evelyn,

What would be the command to only message permission to an allready existing groep.?
So i have an ad group call ts-powerusers. They can allready log in so do not need to change that access. I only need to add send message.

Answer 4

Hi,

You can read below thread fore reference. Ryan Ries' answer might help you.
https://serverfault.com/questions/449529/windows-server-2012-remote-desktop-send-messages-between-standard-users

Thanks,

ELeven

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.