This security setting determines which users or groups have permission to log on as a Terminal Services client.

Default:

• On workstation and servers: Administrators, Remote Desktop Users.
  
  
• On domain controllers: Administrators.
  
  

You can configure this security setting by opening the appropriate policy and expanding the console tree as such: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\

For specific instructions about how to configure security policy settings, see Edit security settings on a Group Policy object.

Important

• This setting does not have any effect on Windows 2000 computers that have not been updated to Service Pack 2.
  
  

For more information, see:

• Deny log on through Terminal Services
  
  
• User Rights Assignment
  
  
• Assign user rights for your local computer
  
  
• Security Configuration Manager tools