RDP 会话 mstsc
之间到底有什么区别
使用mstsc
mstsc /admin
mstsc /console
mstsc /admin /console
所有答案都表示赞赏 - 特别是如果其中任何一个可能会影响用户在不活动后注销。
What exactly is the difference between using
mstsc
mstsc /admin
mstsc /console
mstsc /admin /console
all answers appreciated - in particular if any of these can effect the user being logged out after inactivity.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
关于这一点的一些历史:
在 Windows XP、Windows Server 2003 和早期版本的 Windows 操作系统中,所有服务都在与登录到控制台的第一个用户相同的会话中运行。此会话称为会话 0。在会话 0 中一起运行服务和用户应用程序会带来安全风险,因为服务以提升的权限运行,因此成为寻找提升自身权限级别的方法的恶意代理的目标。 (来源 )
因此,从 Windows XP Service Pack 3、Windows Vista Service Pack 1 和 Windows Server 2008 开始,/console 开关已被消除。
但是,/admin 选项允许您连接到远程计算机上的会话 0,而该远程计算机不支持会话 0。未安装 Windows Vista SP1、Windows XP SP3 或 Windows Server 2008 或更高版本。
关于超时:无论切换如何,默认超时均为 20 分钟。
A little history on this:
In Windows XP, Windows Server 2003, and earlier versions of the Windows operating system, all services run in the same session as the first user who logs on to the console. This session is called Session 0. Running services and user applications together in Session 0 poses a security risk because services run at elevated privilege and therefore are targets for malicious agents who are looking for a means to elevate their own privilege level. (Source)
As a result, the /console switch has been eliminated - starting from Windows XP Service Pack 3, Windows Vista Service Pack 1 and Windows Server 2008.
However, The /admin option lets you connect to Session 0 on a remote computer that doesn’t have Windows Vista SP1, Windows XP SP3 or Windows Server 2008 or later installed.
Concerning Timeouts: The default time out afaik is 20 min regardless of switch.
在终端服务 6.1 之前,您可以通过“mstsc /console”访问远程计算机的“控制台会话”。在 6.0(6.1 及更高版本)之后,标志更改为使用“mstsc /admin”
当您使用“mstsc /admin /console”时,/console 将被忽略。同样,如果您使用“mstsc /v:servername /console”指定主机,则 /console 将被忽略,而不会给您任何警告。
我相信任何一个都应该有相同的不活动计时器,但我还没有在任何地方证实这一点。
Previous to terminal service 6.1 you accessed the "console session" of a remote machine by "mstsc /console". After 6.0(6.1 and later) the flag was changed to using "mstsc /admin"
When you use "mstsc /admin /console" the /console is ignored. Similarly if you specified your host with "mstsc /v:servername /console" the /console would be ignored without giving you any warning.
I believe either one should have the same inactivity timers but I haven't confirmed that anywhere.