Remote Control client settings in Configuration Manager 2012

In an earlier blog about the Remote Control CEP session I explained the rebuild and secure remote control feature in Configuration Manager 2012. Today I want to look at the Client Settings that are related to Remote Control.

You are able to find the Remote Control settings in the Remote Tools section of the Client Device settings.

Remote Control settings

When enabling the remote control feature you are able to configure configuration Manager to be able to configure the firewall settings for the domain, private and public firewall profiles. You need to ensure that Configuration Manager is able reach the destination computer. When enabling a firewall profile, the remote control port and program exceptions are automatically created at the client.

Enable Remote Control and enable creation firewall rules

When you look at the local firewall on a Configuration Manage client, you will see that the firewall exceptions are created like shown below.

Created firewall rule

Configuration Manager firewall rule

Exception program CMRcService.exe

Firewall rule created for profiles

By default users cannot manage their remote control settings via the Software Center. By enabling the setting, which you don’t want if you ask me, you will be allowing users to for instance disallow remote access of their client.

Let the users control their remote control settings

Back again is the ability to send the Ctrl+Alt+Del key key sequence and logon at clients that are unattended.  You will have the option to disable this feature. When you connect with the Configuration Manager Remote Control tool to a Configuration Manager Client you will have the option to send the Ctrl+Alt+Del key.

Control unattended client

In most situations your users will get a notification when you want to connect to their computer, you are able to disable this notification. When the notification is on, you will see the following message.

Waiting for user

Approve or deny remote control

When you choose to grant the remote control permission to local administrators, all members of that group are able to remotely control that workstation. You are able to disable this option, but you than need to configure which (groups of) users are able to connect via remote control or remote assistance.  Personally I think this is the preferred way of giving remote control and remote assistance access.

Define which user or group of users are allowed to remotely control clients

Notification of for when remotely controlling or assisting a client can be enabled of disabled. By default this notification via sound, a session connection bar and a session notification icon on the taskbar is enabled.

Session connection bar

Session connection icon on the taskbar

 

Las but not least you are also able to manage unsolicited, solicited Remote Assistance and Remote Desktop settings with Configuration Manager 2012.This way you are able to use remote assistance and remote desktop from the Configuration Manager 2012 console.

Comments

 
Comments

Hi Peter,
Thanks for the explanation.
If Windows Firewall is Disabled on client computer, what will be the behavior of process which enables Ports and Program rule automatically.
In my environment we have disabled Firewall via GPO, and XP clients are showing a weird behavior, Remote control does not works, and on checking ConfigMgr client / Components / Remote Tools Agent is “Disabled” and Config Mgr Remote Tool Service is also in “Disabled” State. If I enable the service startup Type manual or automatic and start the service, immediately the services goes back to “Disabled” state.
I couldn’t find any issues with Win7 clients.
Your comments will be helpful.

Thanks.

Hi,

What does the following logfile say?

%WINDIR%CCMLogsCmRcService.log

Cheers,
Peter

Trackbacks for this post

Leave a Reply
*