Access Options

Access Options allow you to determine who can access the machine with the Mini Remote Control program.

This feature works in conjunction with Windows 95 User Level Access Mode and then Windows 9x Control Panel - Passwords - Remote Administration options.

This option Restricts Mini Remote Control access for this machine to members of the Local Administrators group only.

Restricts Mini Remote Control access to members of the specified local group only.

Group name that resides locally on the machine that is being access (not a domain group).

Restricts Mini Remote Control access to members of the specified global (domain) group only. Nested Global Grops are also allowed.

The idea behind the local and domain groups is to restrict access (not grant access). In other words, John and Sally may have rights to login to the machine's desktop but the administrator only wants Sally to be able to do this remotely with the Mini Remote Control program. So the Administrator creates a new group called DWREMOTE and adds Sally to that group. He enables the group option in the Mini Remote Client Agent to only allow this group access to the machine. This means that John won't be able to use the Mini Remote to access the machine.

Global Group name that resides on a PDC or BDC (domain group). In versions prior to 5.0, nested Global Groups were not permitted, and only Users that were directly members of this Global Group would be allowed to connect. However, in version 5.0 and higher, nested Global Groups members are now allowed.

This is the list of Domain Controller that the Mini Remote Client Agent will check for the global group membership. These machines will be checked in the order they are listed and the only time the Mini Remote Control will move to the next server in the list is when a fails to make a connection to the current DC in the list.

This button allows you to add a machine name or IP-Address to the list of Domain Controllers, where the Global Group can be located.

Remove the selected DC Hostname from list of Global Group Domain Controllers list

This setting only applies to non-Administrators, and requires the local user (logged into the desktop) to grant permission to this user in order to connect. The Mini Remote Control program will check the machine’s local groups to see if the account that is attempting to login is a member of at least one of the following groups (with full rights to that group).

If the account that is trying to login is not a member of one of these groups then it will fail to start the remote session.

If the account is a member of one of these groups, then the MRC will respond three different ways depending on the remote machine's Advanced Client Agent Settings.

1.	If the 'Permission Required for these account types' option is checked then unless the remote machine is at the logon screen, the end user will have to give the support analyst initiating the remote session permission before the MRC session is started.

2.	If this option is not checked then the remote session cannot start unless the remote machine is at Windows Logon Screen.

This setting only applies to non-Administrators. This option works in conjunction with the Permission Required for these Account Types settings, and if enabled will disconnect any Mini Remote Control attempted connection while the remote machine is at the Logon Desktop or Lock Screen (WINLOGON), where the user does not specify local Administrator credentials.

The View Only for these Account Types feature only applies to non-Administrator accounts. When enabled, anyone connecting to this remote machine using non-Administrator credentials will automatically be in View Only mode, and therefore will not be able to make any modifications on the remote machine.