AKA: SeRemoteInteractiveLogonRight, Allow logon through Terminal Services Default assignment on workstations and member servers: Administrators, Remote Desktop Users Default assignment on domain controllers: Administrators This right first appears in Windows 2000 Service Pack 2 and continues in XPand 2003. This right controls who can establish remote desktop (akaTerminal Services) connections to this computer. As such this is animportant right to properly control. The default assignments arereasonably appropriate. The Deny logon through Terminal Services right overrides this right. Use of this right does not generate a Privilege Use event in the Windows security log but remote desktop logons do generate event ID 540 / 4624 with logon type 10. Changes to these logon rights assignments are logged by event IDs 621 / 4717 and 622 / 4718 . More information at Logon Rights .