What is the significance of the /admin switch in mstsc.exe?

What benefits/risks does the /admin switch for mstsc.exe confer? How is this different from logging in with an Administrator account, without the switch?

Iszi

Posted 2011-01-25T14:38:30.807

Reputation: 11 686

I'm told by my server admin not to use the switch. If I lose connectivity using the /admin switch, I could apparently lock others out of the server. Use as a last resort. If you have VMWare Vsphere client gives you console access as an alternative. – Sun – 2015-04-07T15:13:02.930

1The /admin switch doesn't confer any administrative permissions or rights. – joeqwerty – 2011-01-25T15:45:19.057

2@joeqwerty - I never meant to imply that it does, but thanks for the clarification. – Iszi – 2011-01-25T16:30:51.760

Answers

The (deprecated) MSTSC /console switch is now called the /admin switch:

In both Vista SP1 and Windows Server 2008, the Remote Desktop Program has been updated to version 6.1 (6.0.6001) and one of the changes is that the functionality previously associated with the /console switch is now called the /admin switch.

By using it you're connecting to the Console Session on the server.

Siim K

Posted 2011-01-25T14:38:30.807

Reputation: 6 776

11This is not answering the question. So, what benefits/risks does the /console switch for mstsc.exe confer? How is this different from logging in with an Administrator account, without the switch? – Pacerier – 2015-02-27T10:42:57.243

1The answer is below, but the main thing is that /admin lets you use one of the two built in Admin CALs. Not using this will eat up your CALs. Not sure about the user ones, but not using /admin will use up device CALs. – Andrew – 2017-03-12T18:39:16.750

From http://support.microsoft.com/kb/947723

When you connect to a server that does not have Terminal Server installed.

If a member of the Administrators group starts a Remote Desktop session to a Windows Server 2008-based server that does not have the Terminal Server role service installed, the following conditions are true for the remote administration session:

Time zone redirection is disabled.

Terminal Services Session Broker

(TS Session Broker) redirection is disabled.

Plug and Play device redirection is disabled.

The remote session theme is changed to Windows Classic.

Terminal Services Easy Print is disabled.

When you connect to a server that has Terminal Server installed

If a member of the Administrators group starts a Remote Desktop session to a Windows Server 2008-based server that has the Terminal Server role service installed, they must use the /admin switch to connect to a session to remotely administer the server. The following conditions are true for the session:

You do not have to have a TS CAL to remotely administer a terminal server.

Time zone redirection is disabled.

Terminal Services Session Broker redirection is disabled.

Plug and Play device redirection is disabled.

The remote session theme is changed to Windows Classic.

Terminal Services Easy Print is disabled.

Caltor

Posted 2011-01-25T14:38:30.807

Reputation: 290

1This should be the correct answer as it actually answers the question! – Peter – 2015-12-16T14:52:24.787

Actually it's a little more complex than just a replacement for the /console. Check out http://support.microsoft.com/kb/947723 for more info. /console is designed to connect you to session 0, but session 0 isn't used the same any more and is no longer needed.

user185679

Posted 2011-01-25T14:38:30.807

Reputation: 41

I'm confused about this. As far as I understand, even though the console isn't session 0 any more, there is still one console (which is what would be shown on the screen attached to the server itself if there was one), so surely the /admin switch still has an effect because it connects you to that console? – Andy – 2014-10-27T07:58:55.880

@Andy it's no longer (since Server 2008) possible to get a Remote Desktop connection to the physical console i.e. the one displayed on a monitor plugged into the server. – Caltor – 2016-01-04T16:43:03.547