To Remote Control a Device a User needs permission to control both the Device as well as the logged on user.

In the Above Example, Bill can Remote Control Any PC in the Organization while any user is logged into the PC Except.....

He cannot Remote any PC in the "New York" Device Folder (I could specify specific PCs.) due to the "DENY" permission.

He also cannot Remote Control any PC to which an "Executive" is logged in.

So if an Exec logs into a PC in a conference room in Chicago to check his email, the user will be denied access to remote that PC until the Exec logs out.

Thanks Craig!  Now I see what I was missing.

I setup a test user and gave them remote control rights.  But when I try to open a remote session, I get "This mode of authentication is now allowed in the Remote Management policy."  I'm not doing anything differently then when I RC with my admin account.

Are you trying to do RIGHTS or PASSWORD Based?  What are the policy settings for that?

Super Admin may bypass somethings, but not sure about those settings....

When I attempt to remote with the test user, authentication is set to password, but it is greyed out and I cannot change it.  The remote control policy does not have password authentication enabled.  That seems to be the problem.  How do I permit this user to do rights based authentication?

I can't say.  I've never seen that....Not having rights does not normally gray it out....Just gives you a message about no rights.  Sorry...

Just a follow up for anyone who runs across this in the future.  To get everything working, the administrator needed the remote control rights for the devices and the users logged into those devices.  The administrator also needs view leaf rights on both the device and user.  That as the final piece of the puzzle to get this working.

Just a follow up for anyone who runs across this in the future.  To get everything working, the administrator needed the remote control rights for the devices and the users logged into those devices.  The administrator also needs view leaf rights on both the device and user.  That as the final piece of the puzzle to get this working.

Thanks for the Update!  "The Paul Harvey" is always useful