Home / Solution / Remote Desktop Session Shadowing Mode in Windows 10

Remote Desktop Session Shadowing Mode in Windows 10

Besides Remote Assistance, you should utilize to remotely hook up with the Windows 10 consumer’s desktop. Most directors are utilizing this characteristic to connect with consumer classes on the RDS servers operating Windows Server 2012 R2 / Server 2016. However, just a few of them know that session shadowing can be utilized to remotely view and handle a consumer desktop console session in Windows 10 as nicely. Let’s see the way it works.

As you bear in mind, for those who strive to connect with a Windows 10 laptop utilizing RDP, the session of a consumer working domestically is knocked out (even for those who ). However, you may hook up with a console consumer session straight with out locking it.

Suppose, you wish to join from a server operating Windows Server 2012 R2 to the desktop of a consumer working domestically on a workstation operating Windows 10 Pro.

In order to determine shadow connection to a consumer session, it’s essential to use the usual RDP instrument mstsc.exe. The command appears to be like like this:

Mstsc.exe /shadow: /v:

You may also use one of many following choices:

  • /immediate – request a consumer credentials to attach (if not specified, you may be linked with the present consumer credentials);
  • /management – the mode that permits to work together with the consumer session. If the parameter just isn’t set, you may be linked to a consumer session in a view mode, i. e. you gained’t be capable to management a consumer’s mouse or enter information from the keyboard;
  • /noConsentPrompt – permits to not immediate the consumer for affirmation to connect with a session.

Remote shadowing setting is configured utilizing a Group Policy or by registry modification. You can configure whether or not you might want to request the consumer affirmation to attach, and whether or not view or management is allowed in the shadow session.

The coverage is situated in the GPO editor part Computer Configuration -> Policies -> Administrative Templates -> Windows elements -> Remote Desktop Services -> Remote Session Host -> Connections and known as Set guidelines for distant management of Remote Desktop Services consumer classes.

windows 10 shadow session policy: Set rules for remote control of Remote Desktop Services user sessions

Instead of enabling the coverage, you may set the required worth in the DWORD registry parameter Shadow in the HKLMSOFTWAREPoliciesMicrosoftWindows NTTerminal Services registry key. The allowed values are:

zero – disable distant management;
1 — full management with consumer’s permission;
2 — full management with out consumer’s permission;
three — view session with consumer’s permission;
four — view session with out consumer’s permission.

By default, this registry parameter just isn’t set and the shadow connection is carried out in full management mode with consumer permissions.

To hook up with a consumer session remotely utilizing shadowing, the connecting account will need to have the administrator permissions and Remote Desktop (RDP) enabled on the Windows 10 laptop (in the System Properties).

enable rdp on windows 10 computer

Let’s remotely request the listing of classes on Windows 10 workstation utilizing this command:

qwinsta /server:192.168.1.90

qwinsta - get user session number on windows 10

As you may see, there may be one console consumer session with the ID = 1 on this laptop.

Let’s attempt to remotely hook up with the consumer session 1 by way of a shadow connection. Run the command:

Mstsc /shadow:1 /v:10.10.11.60

Mstsc - shadow connect ro a windows 10 computer from rds

The Windows 10 consumer will see the next request on the display:
Remote connection request
PCadmin is requesting to view your session remotely. Do you settle for the request?

PCadmin is requesting to view your session remotely. Do you accept the request?

If the consumer accepts the connection, you’ll hook up with the Windows 10 console session and see the customers’ desktop. You will see all consumer actions, however gained’t be capable to management this session.

windows 10 session shadowing: viewing user's session

Tip. To finish the shadow session, press alt+* on the desktop laptop or ctrl+* on the RDS server.

If you examine the community connections utilizing TCPView, you may see that it’s the RemoteRPC connection (not an RDP one utilizing port TCP/3389). It implies that a random TCP port from excessive RPC vary is used for shadow connection. Mstsc.exe establishes the connection on the facet of a connecting laptop, and rdpsa.exe or rdpsaproxy.exe (relying on the Windows 10 construct) processes the connection on the shopper facet. So RemoteRPC have to be enabled on the shopper:

HKLMSYSTЕMCurrеntControlSеtControlTеrminal Sеrvеr
“AllowRemotеRPC”=dword:00000001

Windows 10 Session Shadowing - TCP ports

Remote Desktop Shadowing is out there in Windows 10 / eight.1 and Windows Server 2012 R2 / 2016 / 2019. To enable shadowing on Windows 7 SP1 (Windows Server 2008 R2) shoppers, you will want to put in the RDP shopper model eight.1 – KB2830477 (requires set up of the next updates – KB2574819 and KB2857650).

Thus, Remote Desktop Shadowing can be utilized because the substitute of Remote Assistance or TeamViewer in a neighborhood or company community.

Check Also

Get-ADComputer: Find Computer Details in Active Directory with PowerShell

You can use the PowerShell cmdlet Get-ADComputer to get numerous details about laptop account objects …

Leave a Reply

Your email address will not be published. Required fields are marked *