How to enable/disable "Query Information" permission in Remote Desktop OS: Windows 10

Question

In one of the module in my application, I need to call WTS32api : WTSEnumerateSessions which returns Error Code 5.

Here is the question on SO regarding that :

As per suggestion provided there, I want to check, whether particular group/user do have 'Query Information' permission enabled or not.

I could check that on Windows Server 2008 with the help of this documentation.

On the RD Session Host server, open Remote Desktop Session Host Configuration. To open Remote Desktop Session Host Configuration, click Start, point to Administrative Tools, point to Remote Desktop Services, and then click Remote Desktop Session Host Configuration.

Under Connections, right-click the name of the connection, and then click Properties.

In the Properties dialog box for the connection, on the Security tab, configure the permissions as appropriate for your environment, and then click OK.

In my case, 'Security' Tab, clicked on 'Advanced' and then Edit the permission of particular.

But on machine where I am facing the problem, there is Windows 10 installed.

How can I check this on Windows 10?

Answer 1

The security settings you are looking for are exposed by the Remote Desktop Session Host role of Windows Server. You cannot install this role on the workstation versions of Windows, nor do they support simultaneous incoming RDP connections, so that dialog box is not accessible in Windows 10 as it would have no purpose.

I'm not aware of any workaround for this.

For what it's worth, members of the Administrators group can enumerate active RDP sessions on a Windows machine, including Windows 10.