Understanding Terminal Services Manager Permissions

Applies To: Windows Server 2008

Terminal Services permissions are used to control which users or groups can perform particular tasks on the terminal server, such as remotely controlling a user session.

You can manage permissions on a per connection basis in Terminal Services Configuration. The permissions are listed on the Security tab in the Properties dialog box for the connection.

The connection permissions that are set in Terminal Services Configuration determine the actions that a given user can perform in Terminal Services Manager. For example, a user must have at least the Remote Control special access permission in order to remotely control a user session by using Terminal Services Manager.

The following is a list of some of the permissions that you can set in Terminal Services Configuration and the capability that each permission provides.

Permission Capability

Query Information

Query sessions and terminal servers for information

Remote Control

View or actively control another user's session


Log on to a session on the terminal server


Log off a user from a session


Send a message to a user session


Connect to another user session


Disconnect a user session

For more information about setting permissions in Terminal Services Configuration, see the topic "Configure Security Settings for Terminal Services Connections" in the Windows Server 2008 Terminal Services Configuration Help.

Additional references