Welcome to MSDN Blogs Sign in | Join | Help

Console Behavior Differences in Longhorn Server Terminal Services

 

This article describes a few behavioral differences between Windows Server 2003 and Windows Server Codenamed Longhorn in Remote Administration mode. Note that these changes will be available in Beta 3 and later builds.

 

Architectural change - Session 0 Special-ness

 

In Windows 2003, the session 0 is always associated with session on physical console. When user logs on to physical console or connects remotely using /console, she gets session 0.

 

In Longhorn, session 0 is not an interactive session anymore. It hosts only services. The first interactive user session is session 1, no matter whether user is logged on to physical console or connected remotely. The second interactive user session is 2 and so on. The session IDs are reused as users log off and previous sessions are terminated.

 

Reconnecting to session 0 from another session by any means, such as tscon.exe, is denied in longhorn server.

 

 

Reconnecting to your session on physical console

 

In Windows 2003, administrators typically use /console to reconnect remotely to their session on physical console. In Longhorn, /console switch is ignored in remote administration mode. The session obtained by connecting using /console is just like another remote session.

 

Reconnecting to your session on physical console (or any of your sessions for that matter) is driven by "Restrict user to one session" policy. This policy value can be set using tsconfig (under "Edit Terminal Server Settings" - "General" section). There is also a group policy for this which can be edited using gpedit.msc (navigate to Computer configuration - Administrative templates - Windows components - Terminal Services - Terminal Server - Connections).

 

The default value for this policy is 1, which means each user is restricted to one session. So, you do not need /console to reconnect remotely to your session on physical console, unless you modify this policy value. Here is the scenario and behavioral difference in Windows Server 2003 and Longhorn.

 

Scenario:

You are logged on to physical console of the server.

Now you (using same user account) connect remotely to this server.

 

Windows Server 2003 behavior:

 

If you use /console while connecting, you will get reconnected to your session on physical console. If you did not use /console while connecting you will get a new session. It does not matter what the value of "Restrict user to one session" policy is.

 

Windows Server Codenamed Longhorn behavior:       

 

If "Restrict user to one session" policy is ON, you will get reconnected to your session on physical console. Note that you do not need to specify /console anymore to reconnect remotely to your session on physical console.

 

If "Restrict user to one session" policy is OFF: If your session on physical console is active, you will get a new session. If your session on physical console is in disconnected state, you will get reconnected to that session.

 

Note that this behavior applies no matter whether you specified /console or not while connecting.

 

If "Restrict user to one session" policy is OFF and you want to get back to your session on physical console:

 

  • Within your second session, type "qwinsta" to list all the sessions.
  • You should see your session listed as active and named "console". If that is the case, you can simply type "tscon console" to reconnect back to your session.
  • If your session on physical console was disconnected for some reason (e.g. someone switched user on physical console after your remote logon), get the session ID associated with your other session and type "tscon <session ID>" to reconnect back to that session.

 

Published Monday, November 27, 2006 5:55 PM by termserv

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

# Jason Conger Blog &raquo; Blog Archive &raquo; Console Behavior Differences in Longhorn Server Terminal Services

# re: Console Behavior Differences in Longhorn Server Terminal Services

Well, this will prevent 2 admins to make the changes on the same time, i use the console session to install software. Some (3rd) party software is still sensitive to install in a terminal server session instead of a console session. Is it still possible to connect to the console to install software in longhorn?

Saturday, December 02, 2006 8:59 AM by dennis@7summitsict

# re: Console Behavior Differences in Longhorn Server Terminal Services

Using /Console and the 2 terminal sessions, we get a total of 3 interactive sessions that are available to remote desktops in Remote Administration mode.  Are we only going to get 2 with Longhorn, or are there going to be a pool of 3 (or more) for remote administration mode in Longhorn?

Monday, December 04, 2006 12:50 PM by Timothy

# re: Console Behavior Differences in Longhorn Server Terminal Services

I would like to echo the same remarks made by Dennis. If there are any apps or operations that need to be performed on the console, will be there be an option to connect to the console via RDP?

Friday, December 15, 2006 2:13 PM by SunilNair

# re: Console Behavior Differences in Longhorn Server Terminal Services

You will only get 2 admin connections in 'remote administration mode'.

Friday, January 12, 2007 6:37 PM by Alex Balcanquall

# re: Console Behavior Differences in Longhorn Server Terminal Services

> You will only get 2 admin connections in 'remote administration mode'.

Not entirely true -- against Win2k3, you can use two remote connections plus also connect remotely with /console, giving total of three possible simultaneous remote admin connections.

Tuesday, January 16, 2007 3:06 PM by mk

# re: Console Behavior Differences in Longhorn Server Terminal Services

This just doesn't make sense. Is this saying that there is no way to log into a console session as an administrator?

Why is that option being taken away? There are MANY instances that I'd need to work "at a server" remotely, and the console is what I need.

This seems like a real step backward - forcing an administrator to physical be at the server to do administrative work.

Gavin

Friday, January 19, 2007 4:07 PM by gavin@interprom.com

# re: Console Behavior Differences in Longhorn Server Terminal Services

Thanx for the feedback folks!! Let me try and answer your questions. Please feel free to post any further questions if things are still unclear.

Q: "If there are any apps or operations that need to be performed on the console, will be there be an option to connect to the console via RDP?"

A: In Win2K3, applications used to work only in console session (session 0), because they need to talk to services that ran session 0. With the new architecture, only services run in session 0 and applications run in non-zero sessions. Our app compat component has shims that would help such applications work in non-zero session. So, to run those applications, you do not need to be at console session anymore.

Do you have any specific apps or operations in mind?

===============================================

Q: "Is this saying that there is no way to log into a console session as an administrator?"

A: Not really. It's saying that you can not connect to session 0 directly - however, the session 0 is not the "console session" anymore.

The console session is just like any other session as far as ability to perform any kind of operations is concerned. The only difference is that the "console session" does not need the protocol handshake between server and client that goes on in case of "remote session".

If you previously logged on to console session (physically at the machine) and now you want to get back to your session remotely, you can do so without using /console switch. However, the "Restrict user to single session" policy plays role for reconnecting to your "console session". Please refer to "Reconnecting to your session on physical console" section in the original post.

===============================================

Tuesday, January 23, 2007 2:46 PM by Mahesh Lotlikar

# re: Console Behavior Differences in Longhorn Server Terminal Services

What if I'm logged into a machine and TS into it from the console?  I do this all the time at work to do things like start builds or scripts in a window I can connect to later.

Wednesday, July 25, 2007 1:50 AM by c

# re: Console Behavior Differences in Longhorn Server Terminal Services

> What if I'm logged into a machine and TS

> into it from the console?  I do this all the

> time at work to do things like start builds

> or scripts in a window I can connect to

> later.

You can logon to <Machine-A> locally (at physical console) or remotely, start scripts in a window, then you can log back on to same machine <Machine-A> locally or remotely - you will get back to your session, where you had started the scripts.

Please note that you have to restrict each user to single session (which is set by default) - in case you changed it.

If this does not answer your question, can you please elaborate your scenario by giving machine names as example?

Thanx for your question and feedback!!

- Mahesh

Thursday, July 26, 2007 4:03 PM by Mahesh Lotlikar

# MSTSC /console switch in Windows Server 2008 and Windows Vista SP1

Hi All, In Windows Server 2003, the /console option was used for several purposes. With the introduction

Tuesday, November 27, 2007 7:23 PM by Nick MacKechnie's Weblog

# MSTSC /console switch in Windows Server 2008 and Windows Vista SP1

Hi All, In Windows Server 2003, the /console option was used for several purposes. With the introduction

Tuesday, November 27, 2007 7:59 PM by Noticias externas

# re: Console Behavior Differences in Longhorn Server Terminal Services

With Windows 2003, the console session could see popup error messages from services including Windows. Too many popup messages and your server would hang.  A registry change modified this behaviour.

Have the appropriate windows services been re-architected to ensure they no longer pop messages up on the console ? (eg delayed write failure, etc.)

Monday, January 21, 2008 7:49 PM by Tommo

# re: Console Behavior Differences in Longhorn Server Terminal Services

Specific example of needing access to console on Win 2008:

Install Office 2003

Try to run it so you can Activate it

You get 'This feature is not available. For more information  contact your system administrator'

Well I am that person... in order for us to activate Office 2003 (for say Presentation Server) we used to have to be in session0... now on 2008 I can not activate Office 2003, making it unavailable to my end users....  Any suggestions?

Thanks,

Joel

Tuesday, January 29, 2008 6:08 PM by Joel Sheppard

# re: Console Behavior Differences in Longhorn Server Terminal Services

How about a case where folks are using Virtual Machines and not physical bare-metal hardware?  How do we access the console session (session1)?

Thanks,

Joel

Tuesday, January 29, 2008 6:11 PM by Joel Sheppard

# re: Console Behavior Differences in Longhorn Server Terminal Services

We currently use connecting to the /console session of win2003 for applications that need to capture audio from a sound card in the server. This only works in the console session, as the normal remote desktop sessions don't have access to the server's audio device (only to the virtual audio device that can play back audio to the remote pc).

How will this be possible with win2008?

Thursday, March 06, 2008 10:14 AM by Tom

# re: Console Behavior Differences in Longhorn Server Terminal Services

Is very dumb behaviour to eliminate the ability to connect to the console. Many applications, especially older ones that can't be replaced or recoded will only perform specific functions if they are accessed from the console.

I also tend to keep the console session locked by staying logged in on my remote computers. Started doing that by accident, but turned out to be a good idea during a security event where other peoples' remote computers got messed with.

Another useful function is to be able to make a remote computer make noise if it needs attention. When I hear the noise, I can log into the console and see the messages (I have a closet full of servers (literally a closet -- there is sports gear in there, too) in addition to remote servers so I can hear them when they get noisy). I connect to the consoles all the time since putting a keyboard fulltime on all of them would be silly -- and switch boxes are, well, confusing.

As a side note, has something happened with the Windows 2003 in the automatic updates that has also disabled the console ability?

Whoever made the boneheaded decision to disable the console access from terminal services should re-think that decision.

Wednesday, August 27, 2008 6:25 AM by tphaneuf

# re: Console Behavior Differences in Longhorn Server Terminal Services

It also seems like the /console switch is disabled in (SP3 for Win XP). There is no possibilities to connect to the console anymore. The good point with session 0 was that the End a disconnected session was not applied for seesion 0. Very Bad decission to have this implemented in current versions!!!!!!!!!

Thursday, October 16, 2008 4:00 AM by mrworm

# re: Console Behavior Differences in Longhorn Server Terminal Services

Thursday, October 16, 2008 4:08 AM by mrworm

# 2k3 Terminal Services

How can I restrict TS to 1 session only for 2k3. just like XP. Console or not.

thx

Wednesday, November 26, 2008 12:00 AM by cron123

# re: Console Behavior Differences in Longhorn Server Terminal Services

@cron123:

For Windows Server 2003, set the Restrict each user to one session option to Yes in Terminal Services Configuration. Alternatively, set the Restrict Terminal Services users to a single remote session group policy to Enabled.

Thursday, January 08, 2009 6:14 PM by termserv

# re: Console Behavior Differences in Longhorn Server Terminal Services

Well, I understand that console session is not equal to session 0 anymore and that it is not possible to connect to session 0.

Can anyone point out, if there is still a special function of the console session? Is there any difference, anything you can do, that you can't do in any other session?

Thursday, February 05, 2009 5:46 AM by nl

# re: Console Behavior Differences in Longhorn Server Terminal Services

The console session has no special function.

The only difference from a remote session is: console session is connected to the local console instead of a remote console and one does not need to be a member of Remote Desktop Users group to log on to it.

On Remote Desktop Server the console session is equal a remote session started with "/admin" switch (i.e. it does not consume a license). If Remote Desktop Server is not installed, the console session is equal to a remote session.

Thx,

Sergey.

Monday, February 09, 2009 4:43 PM by Sergey Kuzin

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker