Policy
Set rules for remote control of Remote Desktop Services user sessions
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7, WindowsServer2003, WindowsServer2008, WindowsVista, WindowsXP
If you enable this policy setting, administrators can interact with a user's Remote Desktop Services session based on the option selected. Select the desired level of control and permission from the options list: 1. No remote control allowed: Disallows an administrator to use remote control or view a remote user session. 2. Full Control with user's permission: Allows the administrator to interact with the session, with the user's consent. 3. Full Control without user's permission: Allows the administrator to interact with the session, without the user's consent. 4. View Session with user's permission: Allows the administrator to watch the session of a remote user with the user's consent. 5. View Session without user's permission: Allows the administrator to watch the session of a remote user without the user's consent. If you disable this policy setting, administrators can interact with a user's Remote Desktop Services session, with the user's consent.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Options: ID TS_RemoteControl_Levels | enum | HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\Shadow Type REG_DWORD | Options: No remote control allowed (0), Full Control with user's permission (1), Full Control without user's permission (2), View Session with user's permission (3), View Session without user's permission (4) |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow remote start of unlisted programsWindowsServer2008
- ComputerAllow users to connect remotely by using Remote Desktop ServicesAt least Windows Server 2003 operating systems or Windows XP Professional
- ComputerAutomatic reconnectionAt least Windows Server 2003 operating systems or Windows XP Professional
- ComputerConfigure keep-alive connection intervalAt least Windows Server 2003
- ComputerDeny logoff of an administrator logged in to the console sessionAt least Windows XP and Windows Server 2003 only
- ComputerLimit number of connectionsAt least Windows Server 2003
- ComputerRestrict Remote Desktop Services users to a single Remote Desktop Services sessionAt least Windows Server 2003
- ComputerSelect network detection on the serverAt least Windows Server 2012, Windows 8 or Windows RT
- ComputerSelect RDP transport protocolsAt least Windows Server 2012, Windows 8 or Windows RT
- UserSet rules for remote control of Remote Desktop Services user sessionsWindows Server 2008 R2, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP
- ComputerSuspend user sign-in to complete app registrationAt least Windows 8 Enterprise or Windows Server 2012
- ComputerTurn off Fair Share CPU SchedulingAt least Windows Server 2008 R2