The Business Challenge:
Remote Desktop (RD) is a Windows feature that requires administrative privileges to configure. Users in our environment do not have elevated privileges on their endpoints, which results in scheduling an appointment and waiting for tech support to enable the feature. With separate IT departments supporting thousands of users and configuring RD their own way, configurations varied and were more often insecure than not.
How the Fixlet was Customized to Solve the Challenge:
After initial research and brainstorming, it was decided that users would have the option of enabling RD on their own. The requirements for the fixlet on individual machines were to enable Remote Desktop, add the current logged in user to RD Users group, check/set Terminal Services service to Auto and Start, configure local firewall for company VPN subnets, and set the power profile to High Performance. In addition, registry settings were created by pulling user logon, name, and email address to track in an Analysis .
Approximate Time to Customize the Fixlet:
The fixlet took approximately 4-5 hours to customize from start to finish, including inception, research, testing, and minor tweaking post deploy.
The Results that were Achieved by the Fixlet:
One of the results achieved was a Fixlet in production that has streamlined the process for RD setups and eliminated configuration variance. A process was now in place to help standardize RD when inventory was replaced and we could confidently say that RD configuration was in a known state. Additionally, we could also track which machines had RD (and in turn, High Performance power profiles) enabled and who enabled it.
The Business Impact from the Customized Fixlet:
Combining Power Management fixlets, action script, relevance, offers, and web reporting, we were able to deliver an exceptional solution to a wide-scale problem with IEM being the sole source. RD configuration requests were a manual process with inconsistent and insecure results and ranged from 15 minutes to multiple business days for completion. However, due to IEM and the click of an offer, an automated process taking less than 30 seconds to complete and ensuring a secure and audited configuration resolved this issue. Along with a separate Analysis and Fixlets not listed here, we could also audit usage and deactivate RD for those who have not used it for a long period of time. The time savings on the support side, productivity on the customer side, and overall security of our environment drastically improved because of this Fixlet.