In an earlier blog about the Remote Control CEP session I explained the rebuild and secure remote control feature in Configuration Manager 2012. Today I want to look at the Client Settings that are related to Remote Control.
You are able to find the Remote Control settings in the Remote Tools section of the Client Device settings.
Remote Control settings
When enabling the remote control feature you are able to configure configuration Manager to be able to configure the firewall settings for the domain, private and public firewall profiles. You need to ensure that Configuration Manager is able reach the destination computer. When enabling a firewall profile, the remote control port and program exceptions are automatically created at the client.
Enable Remote Control and enable creation firewall rules
When you look at the local firewall on a Configuration Manage client, you will see that the firewall exceptions are created like shown below.
Created firewall rule
Configuration Manager firewall rule
Exception program CMRcService.exe
Firewall rule created for profiles
By default users cannot manage their remote control settings via the Software Center. By enabling the setting, which you don’t want if you ask me, you will be allowing users to for instance disallow remote access of their client.
Let the users control their remote control settings
Back again is the ability to send the Ctrl+Alt+Del key key sequence and logon at clients that are unattended. You will have the option to disable this feature. When you connect with the Configuration Manager Remote Control tool to a Configuration Manager Client you will have the option to send the Ctrl+Alt+Del key.
Control unattended client
In most situations your users will get a notification when you want to connect to their computer, you are able to disable this notification. When the notification is on, you will see the following message.
Waiting for user
Approve or deny remote control
When you choose to grant the remote control permission to local administrators, all members of that group are able to remotely control that workstation. You are able to disable this option, but you than need to configure which (groups of) users are able to connect via remote control or remote assistance. Personally I think this is the preferred way of giving remote control and remote assistance access.
Define which user or group of users are allowed to remotely control clients
Notification of for when remotely controlling or assisting a client can be enabled of disabled. By default this notification via sound, a session connection bar and a session notification icon on the taskbar is enabled.
Session connection bar
Session connection icon on the taskbar
Las but not least you are also able to manage unsolicited, solicited Remote Assistance and Remote Desktop settings with Configuration Manager 2012.This way you are able to use remote assistance and remote desktop from the Configuration Manager 2012 console.
