In many environments it is not necessary that all IT personnel belongs to the Domain Administrators or Enterprise Administrators group. In fact, there are many places where it is not allowed by security policies. Since DameWare Mini Remote Control relies on Windows authentication to establish an MRC session, it is necessary to set a specific configuration in order to allow non-admin users to have the same Remote Control capabilities as admin users. For that, the MRC Client Agent includes "Access" options that allow you to set just that.
You can configure these settings in the MRC Client Agent in three ways: installing the agent from the DameWare Mini Remote Control interface, creating a custom MSI installer that includes the settings or configuring them remotely on computers that already have the MRC Client Agent.
1. Installing a custom agent:
- Launch DameWare Mini Remote Control
- Go to: File > Install Service...
- Click on "Configure..."
or
- Launch DameWare Mini Remote Control
- Press ALT + I
2. Creating a custom MSI installer for the agent:
- Go to: Start > Programs > SolarWinds > DameWare Mini Remote Control 9.0 > DameWare Mini Remote Control Client Agent MSI builder.
- Click on the "Client Agent" button
3. On the remote machine:
- Right-click on the MRC Client Agent tray icon
- Select "Settings..." on the context menu.
All of the above will take you to the agent's properties. Once there open the "Access" tab. Here, do the following:
a. Disable "Permission required for these account types": this will allow non-administrator to start and MRC session without permission from the end-user
b. Disable "View Only for these account types": this will grant remote control to non-administrator accounts.
NOTE: "Disconnect if at the Logon Desktop" causes non-admin users to be disconnected if no active session is available on the remote system. You will want to keep this enabled if the IT agents are only allowed to connect remotely to assist end-users.
