Server 2016

Question

Is there a way to delegate a nonadmin user access to log off or disconnect other users access

Answer 1

Hi @Rajkaran Singh

To permit non-admin users to Disconnect or Sign Off other users, you need to grant the user/group permissions to the RDP-Tcp listener on each RDSH server.

Refer to the below URL it is explained
https://social.technet.microsoft.com/Forums/lync/en-US/7012f60c-327e-4969-b336-1b643b2166d5/delegate-permissions-to-disconnect-and-sign-off-user-sessions?forum=winserverTS

https://serverfault.com/questions/956710/allow-non-admin-users-rdp-session-sign-off-rights-on-windows-server-2016-using

If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

Answer 2

Hi,

The basic steps need to take are:
1.Create a new group with members that needs the specific permission on logging off other user session.

2.Grant the group session with below command(better try with admin privilege)
wmic /namespace:\root\CIMV2\TerminalServices PATH Win32_TSPermissionsSetting WHERE (TerminalName ="RDP-Tcp") CALL AddAccount "domain\group",2

3.Repeate step 2 in all the RDSH servers and ensure the members need to log off and log on again to make the change effective.

After you made above changes, you could also utilize the script described in below blog to get the current user sessions and select one or more users to log off as well as the language modification in the discussion section.

GUI to log off Remote Desktop users by non-admins
https://rcmtech.wordpress.com/2017/07/07/gui-to-log-off-remote-desktop-users-by-non-admins/

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

---

Hope this helps and please help to accept as Answer if the response is useful.

Thanks,
Jenny