logoff user to connect administrator when 2 users are active

[George Valkov]

Remote desktop for Administration mode.
Suppose that two user are logged on the terminal server.
(all 2 available slots are busy)

Now what if an Administrator has to logon (emergency) from far away place on
the internet side?
I receive this error:
The terminal server has exceeded the maximum number of allowed connections.

How do I tell the server to throw a dice and disconnect or logoff someone
(it doesn't matter who)? It is more important that the Administrator can
logon.

What options are available?
1. A configuration or registry setting? Where?
2. /console ?
3. What if I do not want to logoff the console session?



Thank You for any advice and information!

George Valkov

 

[Vera Noest [MVP]]

There's no option or registry setting for this.
Administrative sessions are designed for use by Administrators
only. It should be a very rare situation to have 2 Administrators
already logged on but not able to fix the problem, and thus the
need for a third Administrative session (while there is also
something running on the console which can't be interrupted). In
that case, you best option is to use the phone and ask one of the
other Administrators to log off. Or, if you can connect to your
network, send them a message.

If you are using Administrative sessions to give normal users
access to your server, then you should really install Terminal
Services, not just Remote Desktop for Administration.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"George Valkov" <a@b.com> wrote on 08 jul 2007 in
microsoft.public.windows.terminal_services:

> Remote desktop for Administration mode.
> Suppose that two user are logged on the terminal server.
> (all 2 available slots are busy)
>
> Now what if an Administrator has to logon (emergency) from far
> away place on the internet side?
> I receive this error:
> The terminal server has exceeded the maximum number of allowed
> connections.
>
> How do I tell the server to throw a dice and disconnect or
> logoff someone (it doesn't matter who)? It is more important
> that the Administrator can logon.
>
> What options are available?
> 1. A configuration or registry setting? Where?
> 2. /console ?
> 3. What if I do not want to logoff the console session?
>
> Thank You for any advice and information!
>
> George Valkov

 

[George Valkov]

Thank You very much, Vera!

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns9967D3B5AEAAAveranoesthemutforsse@207.46.248.16...
| There's no option or registry setting for this.
| Administrative sessions are designed for use by Administrators
| only.

Aha! Well, I use it to make my home PC a mobile one and bring it to the
university or whereever I need to. It's very usevul!

| It should be a very rare situation to have 2 Administrators
| already logged on but not able to fix the problem, and thus the
| need for a third Administrative session (while there is also
| something running on the console which can't be interrupted).

In one extremely rare situation, a student has windows server 2003
enterprise installed on his home PC... I mostly work on the console (this
admin account A0 is denied access from network and and RDP for security
reasons), but sometimes I have a second session (as my second admin account
A2) console to localhost. This allows me to better arrange my workspace,
when there are many design applications running. Sometimes I leave home and
logon from my university (as A2). So far so good...
If I forget to close the second terminal session (as A2), oh and by the way
a friend of mine may logon (power user) from the other side of the planet
-) ... (I shall ask him to logoff, when he don't need to be logged on.)
That's 2 out of 2 and I can no longer logon/connect as the already open
session of A2 from my university (if it's still active at localhost). And
the console... Well I like recording movies from the TV and compressing
them. This takes a lot of time, so I prefer not to interrupt it, but I would
do so if I need to.


| In
| that case, you best option is to use the phone and ask one of the
| other Administrators to log off. Or, if you can connect to your
| network, send them a message.

The phone will probably do! Or if I can catch my friend online.


| If you are using Administrative sessions to give normal users
| access to your server, then you should really install Terminal
| Services, not just Remote Desktop for Administration.

And if I do so, what will be the minimum configuration that does not require
me to buy any licenses?


George Valkov



| "George Valkov" <a@b.com> wrote on 08 jul 2007 in
| microsoft.public.windows.terminal_services:
|
| > Remote desktop for Administration mode.
| > Suppose that two user are logged on the terminal server.
| > (all 2 available slots are busy)
| >
| > Now what if an Administrator has to logon (emergency) from far
| > away place on the internet side?
| > I receive this error:
| > The terminal server has exceeded the maximum number of allowed
| > connections.
| >
| > How do I tell the server to throw a dice and disconnect or
| > logoff someone (it doesn't matter who)? It is more important
| > that the Administrator can logon.
| >
| > What options are available?
| > 1. A configuration or registry setting? Where?
| > 2. /console ?
| > 3. What if I do not want to logoff the console session?
| >
| > Thank You for any advice and information!
| >
| > George Valkov

 

[George Valkov]

That friend of mine just gave me a great idea! I can learn how to create a
web application that will show me the active Terminal Sessions and allow me
to reset one

Secure logon (HTTPS) to it will always be available


"George Valkov" <a@b.com> wrote in message
news:%23DMALBawHHA.484@TK2MSFTNGP06.phx.gbl...
| Thank You very much, Vera!
|
| "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
| news:Xns9967D3B5AEAAAveranoesthemutforsse@207.46.248.16...
|| There's no option or registry setting for this.
|| Administrative sessions are designed for use by Administrators
|| only.
|
| Aha! Well, I use it to make my home PC a mobile one and bring it to the
| university or whereever I need to. It's very usevul!
|
|| It should be a very rare situation to have 2 Administrators
|| already logged on but not able to fix the problem, and thus the
|| need for a third Administrative session (while there is also
|| something running on the console which can't be interrupted).
|
| In one extremely rare situation, a student has windows server 2003
| enterprise installed on his home PC... I mostly work on the console (this
| admin account A0 is denied access from network and and RDP for security
| reasons), but sometimes I have a second session (as my second admin
account
| A2) console to localhost. This allows me to better arrange my workspace,
| when there are many design applications running. Sometimes I leave home
and
| logon from my university (as A2). So far so good...
| If I forget to close the second terminal session (as A2), oh and by the
way
| a friend of mine may logon (power user) from the other side of the planet
| -) ... (I shall ask him to logoff, when he don't need to be logged on.)
| That's 2 out of 2 and I can no longer logon/connect as the already open
| session of A2 from my university (if it's still active at localhost). And
| the console... Well I like recording movies from the TV and compressing
| them. This takes a lot of time, so I prefer not to interrupt it, but I
would
| do so if I need to.
|
|
|| In
|| that case, you best option is to use the phone and ask one of the
|| other Administrators to log off. Or, if you can connect to your
|| network, send them a message.
|
| The phone will probably do! Or if I can catch my friend online.
|
|
|| If you are using Administrative sessions to give normal users
|| access to your server, then you should really install Terminal
|| Services, not just Remote Desktop for Administration.
|
| And if I do so, what will be the minimum configuration that does not
require
| me to buy any licenses?
|
|
| George Valkov
|
|
|
|| "George Valkov" <a@b.com> wrote on 08 jul 2007 in
|| microsoft.public.windows.terminal_services:
||
|| > Remote desktop for Administration mode.
|| > Suppose that two user are logged on the terminal server.
|| > (all 2 available slots are busy)
|| >
|| > Now what if an Administrator has to logon (emergency) from far
|| > away place on the internet side?
|| > I receive this error:
|| > The terminal server has exceeded the maximum number of allowed
|| > connections.
|| >
|| > How do I tell the server to throw a dice and disconnect or
|| > logoff someone (it doesn't matter who)? It is more important
|| > that the Administrator can logon.
|| >
|| > What options are available?
|| > 1. A configuration or registry setting? Where?
|| > 2. /console ?
|| > 3. What if I do not want to logoff the console session?
|| >
|| > Thank You for any advice and information!
|| >
|| > George Valkov
|
|

 

[Vera Noest [MVP]]

If you find that all of your administrative sessions are active
because you have forgotten to logoff when you left home, you could
also implement a time out limit on idle sessions, and have them
automatically reset after let's say one hour.
That's done in Terminal Services Configuration.
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

"George Valkov" <a@b.com> wrote on 08 jul 2007 in
microsoft.public.windows.terminal_services:

> That friend of mine just gave me a great idea! I can learn how
> to create a web application that will show me the active
> Terminal Sessions and allow me to reset one
>
> Secure logon (HTTPS) to it will always be available
>
>
> "George Valkov" <a@b.com> wrote in message
> news:%23DMALBawHHA.484@TK2MSFTNGP06.phx.gbl...
>| Thank You very much, Vera!
>|
>| "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
>| in message
>| news:Xns9967D3B5AEAAAveranoesthemutforsse@207.46.248.16...
>|| There's no option or registry setting for this.
>|| Administrative sessions are designed for use by Administrators
>|| only.
>|
>| Aha! Well, I use it to make my home PC a mobile one and bring
>| it to the university or whereever I need to. It's very usevul!
>|
>|
>|| It should be a very rare situation to have 2 Administrators
>|| already logged on but not able to fix the problem, and thus
>|| the need for a third Administrative session (while there is
>|| also something running on the console which can't be
>|| interrupted).
>|
>| In one extremely rare situation, a student has windows server
>| 2003 enterprise installed on his home PC... I mostly work on
>| the console (this admin account A0 is denied access from
>| network and and RDP for security reasons), but sometimes I have
>| a second session (as my second admin
> account
>| A2) console to localhost. This allows me to better arrange my
>| workspace, when there are many design applications running.
>| Sometimes I leave home
> and
>| logon from my university (as A2). So far so good...
>| If I forget to close the second terminal session (as A2), oh
>| and by the
> way
>| a friend of mine may logon (power user) from the other side of
>| the planet -) ... (I shall ask him to logoff, when he don't
>| need to be logged on.) That's 2 out of 2 and I can no longer
>| logon/connect as the already open session of A2 from my
>| university (if it's still active at localhost). And the
>| console... Well I like recording movies from the TV and
>| compressing them. This takes a lot of time, so I prefer not to
>| interrupt it, but I
> would
>| do so if I need to.
>|
>|
>|| In
>|| that case, you best option is to use the phone and ask one of
>|| the other Administrators to log off. Or, if you can connect to
>|| your network, send them a message.
>|
>| The phone will probably do! Or if I can catch my friend online.
>|
>|
>|| If you are using Administrative sessions to give normal users
>|| access to your server, then you should really install Terminal
>|| Services, not just Remote Desktop for Administration.
>|
>| And if I do so, what will be the minimum configuration that
>| does not
> require
>| me to buy any licenses?
>|
>|
>| George Valkov
>|
>|
>|
>|| "George Valkov" <a@b.com> wrote on 08 jul 2007 in
>|| microsoft.public.windows.terminal_services:
>||
>|| > Remote desktop for Administration mode.
>|| > Suppose that two user are logged on the terminal server.
>|| > (all 2 available slots are busy)
>|| >
>|| > Now what if an Administrator has to logon (emergency) from
>|| > far away place on the internet side?
>|| > I receive this error:
>|| > The terminal server has exceeded the maximum number of
>|| > allowed connections.
>|| >
>|| > How do I tell the server to throw a dice and disconnect or
>|| > logoff someone (it doesn't matter who)? It is more important
>|| > that the Administrator can logon.
>|| >
>|| > What options are available?
>|| > 1. A configuration or registry setting? Where?
>|| > 2. /console ?
>|| > 3. What if I do not want to logoff the console session?
>|| >
>|| > Thank You for any advice and information!
>|| >
>|| > George Valkov

 

[Soo Kuan Teo [MSFT]]

Have you tried using Terminal Services command line tools? You can use
Qwinsta.exe to query sessions on a server, and use logoff.exe <session id>
to logoff sessions.
For more info, please goto start menu->Help and Support->Software
Deployment->Terminal Services

Thanks
Soo Kuan


--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
news:Xns99689064B674Averanoesthemutforsse@207.46.248.16...
> If you find that all of your administrative sessions are active
> because you have forgotten to logoff when you left home, you could
> also implement a time out limit on idle sessions, and have them
> automatically reset after let's say one hour.
> That's done in Terminal Services Configuration.
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> "George Valkov" <a@b.com> wrote on 08 jul 2007 in
> microsoft.public.windows.terminal_services:
>
>> That friend of mine just gave me a great idea! I can learn how
>> to create a web application that will show me the active
>> Terminal Sessions and allow me to reset one
>>
>> Secure logon (HTTPS) to it will always be available
>>
>>
>> "George Valkov" <a@b.com> wrote in message
>> news:%23DMALBawHHA.484@TK2MSFTNGP06.phx.gbl...
>>| Thank You very much, Vera!
>>|
>>| "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
>>| in message
>>| news:Xns9967D3B5AEAAAveranoesthemutforsse@207.46.248.16...
>>|| There's no option or registry setting for this.
>>|| Administrative sessions are designed for use by Administrators
>>|| only.
>>|
>>| Aha! Well, I use it to make my home PC a mobile one and bring
>>| it to the university or whereever I need to. It's very usevul!
>>|
>>|
>>|| It should be a very rare situation to have 2 Administrators
>>|| already logged on but not able to fix the problem, and thus
>>|| the need for a third Administrative session (while there is
>>|| also something running on the console which can't be
>>|| interrupted).
>>|
>>| In one extremely rare situation, a student has windows server
>>| 2003 enterprise installed on his home PC... I mostly work on
>>| the console (this admin account A0 is denied access from
>>| network and and RDP for security reasons), but sometimes I have
>>| a second session (as my second admin
>> account
>>| A2) console to localhost. This allows me to better arrange my
>>| workspace, when there are many design applications running.
>>| Sometimes I leave home
>> and
>>| logon from my university (as A2). So far so good...
>>| If I forget to close the second terminal session (as A2), oh
>>| and by the
>> way
>>| a friend of mine may logon (power user) from the other side of
>>| the planet -) ... (I shall ask him to logoff, when he don't
>>| need to be logged on.) That's 2 out of 2 and I can no longer
>>| logon/connect as the already open session of A2 from my
>>| university (if it's still active at localhost). And the
>>| console... Well I like recording movies from the TV and
>>| compressing them. This takes a lot of time, so I prefer not to
>>| interrupt it, but I
>> would
>>| do so if I need to.
>>|
>>|
>>|| In
>>|| that case, you best option is to use the phone and ask one of
>>|| the other Administrators to log off. Or, if you can connect to
>>|| your network, send them a message.
>>|
>>| The phone will probably do! Or if I can catch my friend online.
>>|
>>|
>>|| If you are using Administrative sessions to give normal users
>>|| access to your server, then you should really install Terminal
>>|| Services, not just Remote Desktop for Administration.
>>|
>>| And if I do so, what will be the minimum configuration that
>>| does not
>> require
>>| me to buy any licenses?
>>|
>>|
>>| George Valkov
>>|
>>|
>>|
>>|| "George Valkov" <a@b.com> wrote on 08 jul 2007 in
>>|| microsoft.public.windows.terminal_services:
>>||
>>|| > Remote desktop for Administration mode.
>>|| > Suppose that two user are logged on the terminal server.
>>|| > (all 2 available slots are busy)
>>|| >
>>|| > Now what if an Administrator has to logon (emergency) from
>>|| > far away place on the internet side?
>>|| > I receive this error:
>>|| > The terminal server has exceeded the maximum number of
>>|| > allowed connections.
>>|| >
>>|| > How do I tell the server to throw a dice and disconnect or
>>|| > logoff someone (it doesn't matter who)? It is more important
>>|| > that the Administrator can logon.
>>|| >
>>|| > What options are available?
>>|| > 1. A configuration or registry setting? Where?
>>|| > 2. /console ?
>>|| > 3. What if I do not want to logoff the console session?
>>|| >
>>|| > Thank You for any advice and information!
>>|| >
>>|| > George Valkov

 

[George Valkov]

Thank You, Soo Kuan for reminding me ot that tools!
Vera's suggestion for a time limmit (logoff or disconnect if inactive) is
not apporpriate for my case, because my common practice is to leave the
workplace and go have a walk to rest (sometimes for long). Then I may come
back to continue what I am doing.

On the other hand the qwinsta.exe and rwinsta.exe and logoff.exe tools can
be started from a web page interface (ASP). I can always logon as
Administrator via HTTPS and use web interface to see what user accounts are
logged on and to logoff one of them on my choice.

I believe that this will be the best way, because it is secure, reliable and
there will be no idle sessions reset.
I only need some free time to study ASP... Visual Studio will be a good
friend for this.


"Soo Kuan Teo [MSFT]" <sookuant@online.microsoft.com> wrote in message
news:ed0zSVwwHHA.2432@TK2MSFTNGP04.phx.gbl...
| Have you tried using Terminal Services command line tools? You can use
| Qwinsta.exe to query sessions on a server, and use logoff.exe <session id>
| to logoff sessions.
| For more info, please goto start menu->Help and Support->Software
| Deployment->Terminal Services
|
| Thanks
| Soo Kuan
|
|
| --
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
| "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote in message
| news:Xns99689064B674Averanoesthemutforsse@207.46.248.16...
| > If you find that all of your administrative sessions are active
| > because you have forgotten to logoff when you left home, you could
| > also implement a time out limit on idle sessions, and have them
| > automatically reset after let's say one hour.
| > That's done in Terminal Services Configuration.
| > _________________________________________________________
| > Vera Noest
| > MCSE, CCEA, Microsoft MVP - Terminal Server
| > TS troubleshooting: http://ts.veranoest.net
| > ___ please respond in newsgroup, NOT by private email ___
| >
| > "George Valkov" <a@b.com> wrote on 08 jul 2007 in
| > microsoft.public.windows.terminal_services:
| >
| >> That friend of mine just gave me a great idea! I can learn how
| >> to create a web application that will show me the active
| >> Terminal Sessions and allow me to reset one
| >>
| >> Secure logon (HTTPS) to it will always be available
| >>
| >>
| >> "George Valkov" <a@b.com> wrote in message
| >> news:%23DMALBawHHA.484@TK2MSFTNGP06.phx.gbl...
| >>| Thank You very much, Vera!
| >>|
| >>| "Vera Noest [MVP]" <vera.noest@remove-this.hem.utfors.se> wrote
| >>| in message
| >>| news:Xns9967D3B5AEAAAveranoesthemutforsse@207.46.248.16...
| >>|| There's no option or registry setting for this.
| >>|| Administrative sessions are designed for use by Administrators
| >>|| only.
| >>|
| >>| Aha! Well, I use it to make my home PC a mobile one and bring
| >>| it to the university or whereever I need to. It's very usevul!
| >>|
| >>|
| >>|| It should be a very rare situation to have 2 Administrators
| >>|| already logged on but not able to fix the problem, and thus
| >>|| the need for a third Administrative session (while there is
| >>|| also something running on the console which can't be
| >>|| interrupted).
| >>|
| >>| In one extremely rare situation, a student has windows server
| >>| 2003 enterprise installed on his home PC... I mostly work on
| >>| the console (this admin account A0 is denied access from
| >>| network and and RDP for security reasons), but sometimes I have
| >>| a second session (as my second admin
| >> account
| >>| A2) console to localhost. This allows me to better arrange my
| >>| workspace, when there are many design applications running.
| >>| Sometimes I leave home
| >> and
| >>| logon from my university (as A2). So far so good...
| >>| If I forget to close the second terminal session (as A2), oh
| >>| and by the
| >> way
| >>| a friend of mine may logon (power user) from the other side of
| >>| the planet -) ... (I shall ask him to logoff, when he don't
| >>| need to be logged on.) That's 2 out of 2 and I can no longer
| >>| logon/connect as the already open session of A2 from my
| >>| university (if it's still active at localhost). And the
| >>| console... Well I like recording movies from the TV and
| >>| compressing them. This takes a lot of time, so I prefer not to
| >>| interrupt it, but I
| >> would
| >>| do so if I need to.
| >>|
| >>|
| >>|| In
| >>|| that case, you best option is to use the phone and ask one of
| >>|| the other Administrators to log off. Or, if you can connect to
| >>|| your network, send them a message.
| >>|
| >>| The phone will probably do! Or if I can catch my friend online.
| >>|
| >>|
| >>|| If you are using Administrative sessions to give normal users
| >>|| access to your server, then you should really install Terminal
| >>|| Services, not just Remote Desktop for Administration.
| >>|
| >>| And if I do so, what will be the minimum configuration that
| >>| does not
| >> require
| >>| me to buy any licenses?
| >>|
| >>|
| >>| George Valkov
| >>|
| >>|
| >>|
| >>|| "George Valkov" <a@b.com> wrote on 08 jul 2007 in
| >>|| microsoft.public.windows.terminal_services:
| >>||
| >>|| > Remote desktop for Administration mode.
| >>|| > Suppose that two user are logged on the terminal server.
| >>|| > (all 2 available slots are busy)
| >>|| >
| >>|| > Now what if an Administrator has to logon (emergency) from
| >>|| > far away place on the internet side?
| >>|| > I receive this error:
| >>|| > The terminal server has exceeded the maximum number of
| >>|| > allowed connections.
| >>|| >
| >>|| > How do I tell the server to throw a dice and disconnect or
| >>|| > logoff someone (it doesn't matter who)? It is more important
| >>|| > that the Administrator can logon.
| >>|| >
| >>|| > What options are available?
| >>|| > 1. A configuration or registry setting? Where?
| >>|| > 2. /console ?
| >>|| > 3. What if I do not want to logoff the console session?
| >>|| >
| >>|| > Thank You for any advice and information!
| >>|| >
| >>|| > George Valkov
|