i have decided to c&p this from TGB#89492, b/c i know that it works and find it useful.
one thing to beware of though: MCE2005, by default,
- prevents one account from logging-in from multiple locations at the same time.
- prevents an account from logging-in without a password
this pretty-much requires you to create multiple local accounts in Windows, causing the most-annoying behavior of a required-action when your MCE box boots up.
up to you to decide which is better...
THESE INSTRUCTIONS REQUIRE KNOWLEDGE OF THE WINDOWS REGISTRY AND ARE PROVIDED AS IS, WITHOUT RESPONSIBILITY OF DATA LOSS OR TECHNICAL PROBLEMS. DO NOT APPLY THE FOLLOWING SETTINGS TO SERVERS, COMPUTERS IN A PRODUCTION ENVIRONMENT, OR COMPUTERS WITHOUT FIREWALL PROTECTION.
Print this document before you start doing the following:
1. DISABLE REMOTE DESKTOP CONNECTION (RDC) AND TERMINAL SERVICES
a. Right-click 'My Computer' on the desktop and select 'Properties'
b. Click the 'Remote' tab, and make sure that the
'Allow users to connect remotely to this computer'
checkbox is UNCHECKED, then click 'OK'.
c. Start Menu > Control Panel > Administrative Tools > Services
d. Scroll down the list to find
right-click and select properties. Change the 'Startup Type' drop-down to 'Disabled' (if it is not already), and close the 'Services' window.
2. DISABLE WINDOWS FILE PROTECTION (WFP) TEMPORARILY
a. Open the Registry Editor: Start Menu > Run > 'regedit'
b. Navigate down in the tree to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
c. Change the value of the 'SFCDisable' key on the right to '1' and click 'OK'
d. Close the Registry Editor
3. RESTART THE COMPUTER
4. REPLACE THE RELEASE VERSION OF THE TERMINAL SERVICES DLL (TERMSRV.DLL) WITH A PRIOR UNRESTRICTED VERSION OF THE DLL.
a. Save this replacement file to your desktop. This version of termsrv.dll is from Windows XP SP2 RC1, and I have not had any security problems with it personally.
b. Open Windows Explorer and type in the following location: C:\Windows\system32\dllcache
c. Rename termsrv.dll to something like termsrv1.dll
d. Copy the downloaded version of termsrv.dll into the above folder
e. In Windows Explorer, go up one directory so that you are now looking at: C:\Windows\system32
f. Delete the termsrv.dll file in this directory. Soon WFP will (most likely) re-copy the file even though we (think we) disabled WFP. If it does not re-copy it after about 10 seconds, go ahead and copy the downloaded version to the above directory just like you did in step D, only to the C:\Windows\system32 folder.
5. MAKE THE RDC SETTINGS IN THE WINDOWS REGISTRY ALLOW MORE THAN 2 REMOTE CONNECTIONS AT A TIME
a. Open up the registry editor: Start Menu > Run > 'regedit'
b. Navigate down in the tree to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Licensing Core
c. Add a DWORD Key called 'EnableConcurrentSessions' with a value of 1, then close the Registry Editor.
d. Open up the Group Policy Editor: Start Menu > Run > 'gpedit.msc'
Navigate dow in the tree to: Computer Configuration > Administrative Templates > Windows Components > Termina Services. Double-click the item in the list on the right entitled 'Limit number of connections'. Enable it, and set the number of connections to 3 (or whatever you need). Click 'OK'.
6. RESTART THE COMPUTER
7. RE-ENABLE RDC AND TERMINAL SERVICES
a. Go back and check that checkbox we saw in step 1.b, check it, then click 'OK'.
b. Go back to Control Panel > Administrative Tools > Services, find the 'Terminal Services' item, right click on it, and change the 'Startup Type' value back to 'Manual'
8. RESTART THE COMPUTER.