WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Deny Terminal Services logon
Deny logon through Terminal Services
AKA: SeDenyRemoteInteractiveLogonRight, Deny logon through Terminal Services
Default assignment: None
This is the opposite of Allow logon through Terminal Services and any user with both rights will be denied the right to logon through Terminal Services (aka Remote Desktop). See discussion of logon rights.
Normally this right would only be used for special exceptions where a user who should not be able to logon via Remote Desktop gets that right through membership in a group from which you cannot remove him for other reasons.
Back to top