Need to restrict users to 1 session, but not admins

I run a 2 server Citrix XenApp 4.5 farm and need to configure it so that:

- Administrators can RDP onto more than 1 session
- All other users can not log onto more than 1 Citrix session

If I set the parameter in the TS Configuration for a server to allow
multiple sessions, *everyone* can do it.

I know it must be an easy change, but for the life of me I can't
remember how to do it.... :-(
--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services

 

Not so easy as you might expect:

Can I limit most users to a single session, while allowing other
users multiple sessions?

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Services
RDS troubleshooting:

Hank Arnold <rasilon@aol.com> wrote on 24 sep 2009 in
microsoft.public.windows.terminal_services:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> I run a 2 server Citrix XenApp 4.5 farm and need to configure it
> so that:
>
> - Administrators can RDP onto more than 1 session
> - All other users can not log onto more than 1 Citrix session
>
> If I set the parameter in the TS Configuration for a server to
> allow multiple sessions, *everyone* can do it.
>
> I know it must be an easy change, but for the life of me I can't
> remember how to do it.... :-(<!--colorc--><!--/colorc-->

 

I could swear it was working before... Could it be going from W2K to W2K03?

Anyway, this will work.... I don't need multiple sessions for one admin,
but to allow both admins to RDP at the same time. I'm the network
administrator and usually keep an RDP session open on key servers. The
problem was that my boss sometimes has to RDP to the same server to take
care of a support call if I'm not available. Needless to say, it was a
bit annoying to have my session canceled when the logs on for
something... :-(

Your suggestion will allow this to happen.

Once again, thanks for the help.....

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services


Vera Noest [MVP] wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Not so easy as you might expect:
>
> Can I limit most users to a single session, while allowing other
> users multiple sessions?
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Services
> RDS troubleshooting:
>
> Hank Arnold <rasilon@aol.com> wrote on 24 sep 2009 in
> microsoft.public.windows.terminal_services:
> <!--coloro:green--><span style="color:green <!--/coloro-->
>> I run a 2 server Citrix XenApp 4.5 farm and need to configure it
>> so that:
>>
>> - Administrators can RDP onto more than 1 session
>> - All other users can not log onto more than 1 Citrix session
>>
>> If I set the parameter in the TS Configuration for a server to
>> allow multiple sessions, *everyone* can do it.
>>
>> I know it must be an easy change, but for the life of me I can't
>> remember how to do it.... :-(<!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

 

as a work around, you could set fSingleSessionPerUser=0 and use this snip in
a logon script:

query user | find /i " %USERNAME%" >nul 2>&1 && logoff
^
|
!whitespace! --+

if ones username, prefixed by a withespace is found in "query user", the
user is logged in at least twice...

HTH

-jolt

"Hank Arnold" <rasilon@aol.com> schrieb im Newsbeitrag
news:ecKvs41PKHA.1280@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
>I could swear it was working before... Could it be going from W2K to W2K03?
>
> Anyway, this will work.... I don't need multiple sessions for one admin,
> but to allow both admins to RDP at the same time. I'm the network
> administrator and usually keep an RDP session open on key servers. The
> problem was that my boss sometimes has to RDP to the same server to take
> care of a support call if I'm not available. Needless to say, it was a bit
> annoying to have my session canceled when the logs on for something... :-(
>
> Your suggestion will allow this to happen.
>
> Once again, thanks for the help.....
>
> --
>
> Regards,
> Hank Arnold
> Microsoft MVP
> Windows Server - Directory Services
>
>
> Vera Noest [MVP] wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> Not so easy as you might expect:
>>
>> Can I limit most users to a single session, while allowing other users
>> multiple sessions?
>>
>> _________________________________________________________
>> Vera Noest
>> MCSE, CCEA, Microsoft MVP - Terminal Services
>> RDS troubleshooting:
>>
>> Hank Arnold <rasilon@aol.com> wrote on 24 sep 2009 in
>> microsoft.public.windows.terminal_services:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> I run a 2 server Citrix XenApp 4.5 farm and need to configure it
>>> so that:
>>> - Administrators can RDP onto more than 1 session
>>> - All other users can not log onto more than 1 Citrix session
>>>
>>> If I set the parameter in the TS Configuration for a server to
>>> allow multiple sessions, *everyone* can do it.
>>>
>>> I know it must be an easy change, but for the life of me I can't
>>> remember how to do it.... :-( <!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->

 

Not sure how this helps me... I;m not trying to find out if anyone is
logged on twice, I'm trying to restrict the ability to do so to just
admins.....

Could you expand on how this helps me do that? TIA.

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services


jolteroli wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> as a work around, you could set fSingleSessionPerUser=0 and use this snip in
> a logon script:
>
> query user | find /i " %USERNAME%" >nul 2>&1 && logoff
> ^
> |
> !whitespace! --+
>
> if ones username, prefixed by a withespace is found in "query user", the
> user is logged in at least twice...
>
> HTH
>
> -jolt
>
> "Hank Arnold" <rasilon@aol.com> schrieb im Newsbeitrag
> news:ecKvs41PKHA.1280@TK2MSFTNGP04.phx.gbl...<!--coloro:green--><span style="color:green <!--/coloro-->
>> I could swear it was working before... Could it be going from W2K to W2K03?
>>
>> Anyway, this will work.... I don't need multiple sessions for one admin,
>> but to allow both admins to RDP at the same time. I'm the network
>> administrator and usually keep an RDP session open on key servers. The
>> problem was that my boss sometimes has to RDP to the same server to take
>> care of a support call if I'm not available. Needless to say, it was a bit
>> annoying to have my session canceled when the logs on for something... :-(
>>
>> Your suggestion will allow this to happen.
>>
>> Once again, thanks for the help.....
>>
>> --
>>
>> Regards,
>> Hank Arnold
>> Microsoft MVP
>> Windows Server - Directory Services
>>
>>
>> Vera Noest [MVP] wrote:<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> Not so easy as you might expect:
>>>
>>> Can I limit most users to a single session, while allowing other users
>>> multiple sessions?
>>>
>>> _________________________________________________________
>>> Vera Noest
>>> MCSE, CCEA, Microsoft MVP - Terminal Services
>>> RDS troubleshooting:
>>>
>>> Hank Arnold <rasilon@aol.com> wrote on 24 sep 2009 in
>>> microsoft.public.windows.terminal_services:
>>>> I run a 2 server Citrix XenApp 4.5 farm and need to configure it
>>>> so that:
>>>> - Administrators can RDP onto more than 1 session
>>>> - All other users can not log onto more than 1 Citrix session
>>>>
>>>> If I set the parameter in the TS Configuration for a server to
>>>> allow multiple sessions, *everyone* can do it.
>>>>
>>>> I know it must be an easy change, but for the life of me I can't
>>>> remember how to do it.... :-( <!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
>
> <!--colorc--><!--/colorc-->

 

it logs off any user connecting, who already has a session running...


it's probably not what you've been looking for...

-jolt

"Hank Arnold" <rasilon@aol.com> schrieb im Newsbeitrag
news:%23NX5hhCQKHA.508@TK2MSFTNGP06.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Not sure how this helps me... I;m not trying to find out if anyone is
> logged on twice, I'm trying to restrict the ability to do so to just
> admins.....
>
> Could you expand on how this helps me do that? TIA.
>
> --
>
> Regards,
> Hank Arnold
> Microsoft MVP
> Windows Server - Directory Services
>
>
> jolteroli wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> as a work around, you could set fSingleSessionPerUser=0 and use this snip
>> in a logon script:
>>
>> query user | find /i " %USERNAME%" >nul 2>&1 && logoff
>> ^
>> |
>> !whitespace! --+
>>
>> if ones username, prefixed by a withespace is found in "query user", the
>> user is logged in at least twice...
>>
>> HTH
>>
>> -jolt
>>
>> "Hank Arnold" <rasilon@aol.com> schrieb im Newsbeitrag
>> news:ecKvs41PKHA.1280@TK2MSFTNGP04.phx.gbl...<!--coloro:darkred--><span style="color:darkred <!--/coloro-->
>>> I could swear it was working before... Could it be going from W2K to
>>> W2K03?
>>>
>>> Anyway, this will work.... I don't need multiple sessions for one admin,
>>> but to allow both admins to RDP at the same time. I'm the network
>>> administrator and usually keep an RDP session open on key servers. The
>>> problem was that my boss sometimes has to RDP to the same server to take
>>> care of a support call if I'm not available. Needless to say, it was a
>>> bit annoying to have my session canceled when the logs on for
>>> something... :-(
>>>
>>> Your suggestion will allow this to happen.
>>>
>>> Once again, thanks for the help.....
>>>
>>> --
>>>
>>> Regards,
>>> Hank Arnold
>>> Microsoft MVP
>>> Windows Server - Directory Services
>>>
>>>
>>> Vera Noest [MVP] wrote:
>>>> Not so easy as you might expect:
>>>>
>>>> Can I limit most users to a single session, while allowing other users
>>>> multiple sessions?
>>>>
>>>> _________________________________________________________
>>>> Vera Noest
>>>> MCSE, CCEA, Microsoft MVP - Terminal Services
>>>> RDS troubleshooting:
>>>>
>>>> Hank Arnold <rasilon@aol.com> wrote on 24 sep 2009 in
>>>> microsoft.public.windows.terminal_services:
>>>>> I run a 2 server Citrix XenApp 4.5 farm and need to configure it
>>>>> so that:
>>>>> - Administrators can RDP onto more than 1 session
>>>>> - All other users can not log onto more than 1 Citrix session
>>>>>
>>>>> If I set the parameter in the TS Configuration for a server to
>>>>> allow multiple sessions, *everyone* can do it.
>>>>>
>>>>> I know it must be an easy change, but for the life of me I can't
>>>>> remember how to do it.... :-(<!--colorc--><!--/colorc-->
>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->