Remote Desktop shadowing - Revision history

Dan: /* Tool */

2021-09-17T17:27:29Z

Tool

Dan: /* Tool */

2021-09-17T17:25:09Z

Tool

Dan at 18:37, 8 May 2021

2021-05-08T18:37:33Z

Dan at 16:13, 5 May 2021

2021-05-05T16:13:06Z

Dan at 10:22, 5 May 2021

2021-05-05T10:22:30Z

Dan at 22:32, 4 May 2021

2021-05-04T22:32:49Z

Dan: Created page with "Shadowing is a feature that gives you the ability to watch or control ('shadow') an active session. This does not replace the session, and won't result into the original sessi..."

2021-05-04T22:02:11Z

Created page with "Shadowing is a feature that gives you the ability to watch or control ('shadow') an active session. This does not replace the session, and won't result into the original sessi..."

New page

Shadowing is a feature that gives you the ability to watch or control ('shadow') an active session. This does not replace the session, and won't result into the original session getting disconnected.<br>
This feature works on all active sessions including the 'console session', and do not require the computer to be a Remote Desktop server. Which means you can also do this take over normal desktop computers screens.<br>

A session can only be shadowed using or authenticating with an account which has shadow rights, you do not necessarily need the credentials from the account of the shadowed session.<br>
By default all Administrators have this permission. For more information regarding permissions within Remote Desktop, please refer to the [[Remote_Desktop_permissions|Remote Desktop permissions]] article.

=Setup=
a
=Usage=
b
=Tool=
c
=Other=
===Trivia===
* Shadowing will display all screens of the shadowed session and will scale them to fit into one window, there is no feature to select only specific screens.
* Even though some editions of Windows don't officially support being a Remote Desktop host, manually setting this up through this article (or tool) will make this feature work.

@@ Line 86: / Line 86: @@
 [[File:RDS.png|thumb|right]]
 A tool is available that gives you the ability to easily shadow a session, look up session ID's, and setup/configure shadowing.<br>
-You can learn more about this by visiting the article [[Remote Desktop Shadowing (Tool)]].
+You can learn more about this by visiting the article [[Remote Desktop Shadow (Tool)]].
 =Other=

@@ Line 33: / Line 33: @@
 #:: <code>netsh advfirewall firewall add rule name="RDS" dir=in action=allow protocol=TCP program="%SystemRoot%\System32\RdpSa.exe"</code>
 #:: <code>netsh advfirewall firewall add rule name="RDS" dir=in action=allow protocol=TCP localport=445 program=System</code>
-# Configure shadow mode level.
+# Configure shadow mode level.<br> NOTE: By default the level is set to 1.
 #:* Open "Local Group Policy Editor" (gpedit.msc), go to "Computer Configuration > Administrative Templates > Windows components > Remote Desktop Services > Remote Session Host > Connections".
 #:: Open "Set rules for remote control of Remote Desktop Services user session".

@@ Line 40: / Line 40: @@
 #:: <code>[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services]</code>
 #:: <code>"Shadow"=dword:00000001</code>
-{| class="wikitable"
+::::{| class="wikitable"
 |-
 | 0 || Disable
@@ Line 57: / Line 57: @@
 =Usage=
+For example:<br>
 =Tool=
+c

@@ Line 9: / Line 9: @@
 Follow these steps to manually configure your computer, within each step there are multiple options to do it.
-# Allow the computer to be taken over.
+# Enable Remote Desktop.
 #:* Go to "System > Remote Access/Settings", or search for this in the Start Menu, or run "systempropertiesremote.exe".
 #:: Select "Allow remote connections to this computer".
@@ Line 16: / Line 16: @@
 #:: <code>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server]</code>
 #:: <code>"fDenyTSConnections"=dword:00000000</code>
-# Allow a user or group to remote access.
+# Grant users or groups permission.
 #:* Go to "System > Remote Access/Settings", or search for this in the Start Menu, or run "systempropertiesremote.exe".
 #:: Enter "Select Users", and add a user or group.
@@ Line 26: / Line 26: @@
 #:: If the group does not exist, create it first with the command:
 #:: <code>net localgroup "Remote Desktop Users" /add</code>
-# Allow Shadow to use ports within the Firewall.
+# Configure the firewall to allow Remote Desktop traffic.<br> NOTE: This step is already done automatically when you executed the first option of step 1.
 #:* Go to "Windows Defender Firewall > Advanced Settings".
 #:: Create an Inbound Rule, choose Program, and allow "%SystemRoot%\System32\RdpSa.exe".
@@ Line 33: / Line 33: @@
 #:: <code>netsh advfirewall firewall add rule name="RDS" dir=in action=allow protocol=TCP program="%SystemRoot%\System32\RdpSa.exe"</code>
 #:: <code>netsh advfirewall firewall add rule name="RDS" dir=in action=allow protocol=TCP localport=445 program=System</code>
 ===Tool===

@@ Line 1: / Line 1: @@
-Shadowing is a feature that gives you the ability to watch or control ('shadow') an active session. This does not replace the session, and won't result into the original session getting disconnected.<br>
+Shadowing is a feature that gives you the ability to watch or control ('shadow') an active session. This does not replace the session and won't result into the original session getting disconnected.<br>
-This feature works on all active sessions including the 'console session', and do not require the computer to be a Remote Desktop server. Which means you can also do this take over normal desktop computers screens.<br>
+This feature works on all active sessions including the 'console session', which means you can also use this take over normal desktop computers screens.<br>
 A session can only be shadowed using or authenticating with an account which has shadow rights, you do not necessarily need the credentials from the account of the shadowed session.<br>
@@ Line 6: / Line 6: @@
 =Setup=
+===Manually===
 =Usage=
+b

@@ Line 84: / Line 84: @@
 =Tool=
+[[File:RDS.png|thumb|right]]
 =Other=
 ===Trivia===
 * Shadowing will display all screens of the shadowed session and will scale them to fit into one window, there is no feature to select only specific screens.
 * Even though some editions of Windows don't officially support being a Remote Desktop host, manually setting this up through this article (or tool) will make this feature work.