-
Title
PCM does not work with Windows 7, 2008 or 2012 and normal desktop is loaded. -
Description
Privileged Command Management (PCM) does not work with Windows 7, 2008 or 2012. Instead of the specific program being executed the user receives a standard RDP desktop.
-
Resolution
PCM relies on native Microsoft RDP functionality. This is usually an issue with the target system setup, to verify this:
1. Run the mstsc.exe
2. Browse to the Programs tab.
3. Configure it to start the program.
Eg. Program path and file name: taskmgr and start in the following folder: c:\windows\system32
If the program does not automatically launch, configure the following registry keys and reboot the managed server.
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fAllowUnlistedRemotePrograms = [REG_DWORD, value: 00000001]
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\fTurnOffSingleAppMode = [REG_DWORD, value: 00000000]
If the above doesn't work, additionally modify/add:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Terminal Server\HonorLegacySettings = [REG_DWORD, value: 00000001]
If using Windows 2008 prior to SP3 or Windows 2008 R2 prior to SP1 you may also need to install the below hotfix from Microsoft
http://support.microsoft.com/kb/969851/en-usOne Identity does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support.