8.11 Enabling TSClientAutoAdminLogon

Normally, without the Client installed, a terminal services client will pass a specific Windows account name, password, and domain name from the terminal client workstation to be used in establishing and logging on to Windows within the terminal session.

When the Client is installed, by default this behavior is unchanged. Correct Windows credentials passed from the terminal client workstation still result in a Windows-only account logon within the terminal session.

If the "TSClientAutoAdminLogon" policy is established, in addition to the Windows account logon using these credentials provided from the terminal client, the Windows account username and Windows account password will "merged" with a specified Client login profile, and will be attempted for eDirectory login in addition to the Windows account logon. Provided that the eDirectory user account name and password are already in sync with the Windows account username and password, this will result in a successful and transparent login to both eDirectory and Windows using the credentials provided from the terminal client workstation, where only a Windows account logon would have normally occurred.

NOTE:Although this behavior has greatest impact for Windows Server 2012 Terminal Services conifigurations, the TSClientAutoAdminLogon policy also has the same operational behavior for Remote Desktop usage on Windows workstations. Normally Windows account credentials pre-supplied in the terminal client connection result in a Windows-only account logon via Remote Desktop. If the TSClientAutoAdminLogon policy is established on the Windows workstation, the same Remote Desktop connection will attempt a transparent eDirectory and Windows account logon using the Windows account credentials provided from the terminal client workstation.

8.11.1 Enabling the TSClientAutoAdminLogon policy

  1. Click the Start button, then type regedit.exe in the Start Search field.

  2. Press Enter to open the Registry Editor.

  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login, then add the following:

    • Value Type=REG_SZ, Name=TSClientAutoAdminLogon, Data=1

    • Value Type=REG_SZ, Name=DefaultLoginProfile, Data=name of profile to use

      if you need the same login profile for both eDirectory AutoAdminLogon and TSClientAutoAdminLogon.

      or

      Value Type=REG_SZ, Name=TSClientDefaultLoginProfile, Data=name of profile to use

      if you need to specify a unique default profile name for TSClientAutoAdminLogon, which is different from the eDirectory AutoAdminLogon default profile name.

    NOTE:If either DefaultLoginProfile or TSClientDefaultloginProfile is not provided, the Default profile for the eDirectory username is used for the TSClientAutoAdminLogon.

  4. Close the Registry Editor.