Found it!  on the terminal server, go to  Administrative tools\Terminal Services\Terminal services configuration right click RDP-TCP, choose properties goto security tab click add and add your remote control AD group click Advanced, select the group en click edit assuming this group also has memebership of remote desktop users only select (allow) Remote control  now to try and put this in a group policy...  Shame i cant award credits to myself  O no wait, i can 
Hi,  New to vWorkspace i'm trying to allow application specialists to help users by using remote control. I've created groups in Active Directory Added these groups in the Administration section, default everything to deny. right click a terminal server, properties, permissions and select the created group mark allow for Remote control user sessions and Send message to users.  members of the group can now open the console and view everything (which is not very helpful) they can browse to the terminal server, select the users tab, select the user, right click and select remote control or send message. However, this ends in an error: "Session om computer [name] could not be remote-controlled. (Result=0)"  or when sending a message: "Method '~' of object '~' failed (-2147467259)"  An administrator can remotely control that same session fine. So it must be some permission somewhere.  Can anybody point me in the right direction?  TIA  Paul
How do i allow a user group to use remote control?