WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Deny Terminal Services logon

Deny logon through Terminal Services

AKA: SeDenyRemoteInteractiveLogonRight, Deny logon through Terminal Services

Default assignment: None

This is the opposite of Allow logon through Terminal Services and any user with both rights will be denied the right to logon through Terminal Services (aka Remote Desktop). See discussion of logon rights.

Normally this right would only be used for special exceptions where a user who should not be able to logon via Remote Desktop gets that right through membership in a group from which you cannot remove him for other reasons.

Back to top


Additional Resources