rhubarb:Here's a trick I just learnt.
WOW Rhubarb - great post, but man, thats such a huge waste of time.
1) To connect to a remote machine on the Console, make a copy of your
"Remote Desktop Connection" shortcut (mstsc.exe) and name it TS
Console. Then edit the properties and change it to read:
mstsc.exe /console
Now when you run this custom version of the RDP client, and you connect
to your MCE machine that has been hacked as per the first post, you
will end up on Session Zero.
2) how to figure out what session your in or who else is logged on, etc.
If this hack works very well and puts MCE into the Remote Admin mode
ala Windows 2003, then Task Manager should show you who all is logged
in where, if not on a custom tab, then in Processes under View, Select
Columns, Session ID.
These both come pretty much straight from Windows 2003 Server. I
manage Terminal Servers and Citrix boxes all day, so this multi user
windows stuff is old hat, just not on an XP based machine.
Thanks for posting all that info though. Hopefully these other modes will work and save a little time.
PS: Windows 2003 also has a QUERY command in system32 that offers
"Query user *" in place of qwinsta.exe. not sure if that will
work if simply copied over from a 2003 Server or not, but its worth a
shot.