|
HOW TO: Remotely change the SMS Client's 'Permission Required' Option |
|
|
This article explains how to disable the requirement for a user to grant access to a remote control session on an individual basis. That is, to enable the permission required policy, but disable it on select machines, e.g. servers.
The ‘permission required' option
Generally, the option will be set to ask for permission when connecting to the remote control agent of an SMS client; or at least, it is for PCs, whereby the user will then grant or decline accordingly.
However, for a server, this isn't the case as there's very rarely someone sitting in front of the server -and when there is, they're usually fixing it so won't require another admin to connect in.
Because of this, it is widely acknowledged that the ‘Permission Required' setting is set at the enterprise level and then overridden at the individual server level. This is accomplished through the following registry value:
PermissionRequired [REG_DWORD]
Located in the registry key:
HKLM\ software\ microsoft\ sms\ client\client components\ remote control
Setting this value to zero [0] disables the requirement for the local user to confirm whether or not you can connect. However, when a client connects to its CAP (every 23 hours by default), the enterprise wide setting is pulled and this change will be overwritten.
Therefore, it is also necessary to add the following value:
UpdateEnabled [REG_SZ]
With the value setting of: No
Changing the value on the fly
Sometimes, especially in larger environments, servers won't have had this registry setting changed, or it was changed without the ‘UpdateEnabled' value being added. In these frustrating instances, whereby you are trying to connect and the SMS Remote Tools is asking for permission, the following commands will configure the SMS client settings accordingly:
Note. The reg.exe command is part of the support tools, which can be found in the support folder on your Windows installation CDROM.
Note. These two commands can easily be added to an existing script, or combined into a simple script, whereby the computer name can be replaced by the %1 variable.
reg add "\\servername\hklm\software\microsoft\sms\client\client
components\remote control" /v "Permission Required" /t REG_DWORD /d 0 /f
reg add "\\servername\hklm\software\microsoft\sms\client\client
components\remote control" /v "UpdateEnabled" /t REG_SZ /d No /f
Note. The above lines have been wrapped for readability reasons. They are actually one line each (two lines in total).
Document information
Author: Paul Williams
Written: 11-06-2004
Version: 2.0
Last updated: 07-08-2007
Last updated by: Paul Williams
|
About 
