There are two factors to consider when attempting to resolve this behavior.
1. What rights do the supplied credentials have on the remote machine (Administrator vs. non-Administrator)?
2. Is either Permission Required setting enabled within the DMRC Client Agent Service on the remote machine?
Within the DameWare Mini Remote Control (DMRC) program, a user is considered either an Administrator (i.e. member of the local Administrators group), or a non-Administrator (i.e. everyone else). When the term "Administrators" is used, it is referring to anyone that is a member of the Local Administrators group on the remote machine, either directly (UserID added directly to Local Admin Group), or indirectly via some other Domain Group (UserID added to Domain Admins & Domain Admins is member of Local Administrators).
There are two scenarios in which a user will receive the "Waiting for Client to Accept Connection" message, which means that permission (Accept/Decline) is needed from the user currently logged into the desktop on the remote machine in order to connect.
1). "Permission Required" is enabled on the Additional Settings tab within the settings of the MRC Client Agent Service on the remote machine. By default this is disabled. Therefore, the person that installed the Client Agent Service on the remote machine has enabled this feature. When enabled, this option will prompt the currently logged on user to grant/deny permission for every connection attempt (Admin and Non-Admin).
2). If "Permission Required for these Account Types" is enabled on the Access tab within the settings of the MRC Client Agent Service on the remote machine. This setting is for Non-Administrators and will prompt the currently logged on user to Allow or Deny the connection attempt by the Non-Administrator.
Non-Administrator Mode:
In version 6.9 of the software, it is now possible for a user with Non-Administrator rights to connect to a remote machine without explicit permission. This new functionality was implemented in a way that maintains the cooperation of our software with the Operating System security of the remote machine, but provides a configurable option within the MRC client agent service to allow this type of connection. Administrator rights are still required to install, start, stop, remove, upgrade, or downgrade the service as well as to modify the settings of the service once it is installed on a remote machine.
If the "Permission Required for these Account Types" setting is enabled (on the Access tab of the MRC client agent service settings) and a Non-Administrator attempts to connect to a remote machine, whoever is currently logged in to the remote machine is presented with a dialog box asking him or her to Accept or Decline the Non-Administrator's request to connect. If the currently logged in user presses the "Allow" button, the Non-Administrator is allowed to connect. If the currently logged in user presses the "Decline" button, the Non-Administrator is not allowed to connect.
If the "Permission Required for these Account Types" setting is NOT enabled (thus it is disabled), then permission will NOT be required for a Non-Administrator to connect and he or she will be allowed to connect in "Non-Administrator Mode."
When a connection is established in Non-Administrator Mode, the Notify Dialog box will be displayed on the remote machine with the words, "Non-Administrator Mode" and cannot be closed.
***Important note: The "Permission Required" setting on the Additional Settings tab of the MRC client agent service settings, trumps the "Permission Required for these Account Types" setting. This setting applies to Administrators as well as Non-Administrators. If it is enabled, every individual who wishes to establish an MRC connection to a remote machine where a user is currently logged in to the O/S, will require the user's permission. In summary, the "Permission Required for these Account Types" setting only applies to Non-Administrators and now provides the ability, when disabled, for a Non-Administrator to connect to a remote machine without explicit permission.
Admin Only Mode = Non-administrators will require permission
Non-Admin Mode = Non-administrators will not require permission
Permission Required Mode = Everyone requires permission
Keep in mind too, that the "Disconnect if at Logon Desktop" setting as well as the "View Only for these Account Types" setting also apply (if enabled) regardless of the "Permission Required for These Account Types" setting. |