- Allow logon through Terminal Services
- Deny logon through Terminal Services
To establish a Terminal Services session, a user must have the following permissions:
- Allow logon through Terminal Services To grant a user these permissions, start the Group Policy snap-in, open the Local Security Policy or the appropriate Group Policy, and then navigate to the following location:Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
- Allow logon to Terminal Server
To grant a user these permissions, start either the Active Directory Users and Computers snap-in or the Local Users And Groups snap-in, open the user's properties, click the Terminal Services Profile tab, and then click to select the Allow logon to Terminal Server check box.
- Guest Access: Logon to the RDP-TCP connection
To grant guests Logon rights to the RDP-TCP connection, start the Terminal Services Configuration snap-in, edit the RDP-TCP so that the guest has at least Logon rights.