Viewing Remote Sessions › Remote Viewer › Securing the Remote Viewer › Security and the Windows Operating System › Primary Control Mode › Configuration

Configuration

To enable Primary Control Mode for a session, checkmark the option, Enable Remote Viewer Primary Control Mode in the session definition’s session settings.

When Primary Control Mode is enabled, only one remotely connected user can have primary access (EXEC or FULL) to the session. All other users have secondary access (VIEW or NONE). No user can gain a higher access level than entitled to by settings. Only users that have EXEC or FULL permission to a session can gain primary control.

The following configuration options are available:

Enable Primary Control Mode

Specifies if the Primary Control Mode feature is enabled.

Primary Control – Required Permission

The minimum privilege that is required for Primary Control can be set to EXEC or FULL.

Primary Control – Grant primary control to the first user

This option specifies whether an eligible remotely connecting user automatically gets Primary Control when there is no other user with Primary Control at the time. This option is forced enabled when the Secondary Control – Highest Permission option is set to NONE.

Secondary Control – Highest Permission

The Highest (effective) permission level a remotely connected user can have while in Secondary Control of a session. This permission is NONE or VIEW. If a user normally has a higher permission level, it is lowered to the one set in this option.

Secondary Control – Auto-request primary control

This option specifies if a user remotely connecting to a session where another user already has Primary Control, can automatically request a Primary Control transfer. This option is valid only when the Secondary Control – Highest Permission option is set to NONE.

Request Timeout – Timeout duration

Specifies the amount of time in seconds a user has available to respond to a Primary Control transfer request before deemed unresponsive, at which point the configured timeout action is taken. When set to zero, the timeout action takes place immediately.

Request Timeout – Timeout action

CA Automation Point server uses this action when a Primary Control transfer request times out. This permission can be KEEP or YIELD. The KEEP value means that the request is denied. The YIELD means that the request is accepted.