Re: Deny Right to Local Admin Group to Log On Via Terminal Services?

Thanks!


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:O%23tsDXonHHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
No harm, other than loss of the avenue for remote mgmt.
You could just remove the grant to Administrators, either on the
RDP connectoid or the user right, rather than using a deny in either
(or both) places.

"NW" <interest@xxxxxxxxxx> wrote in message
news:%23fagpCinHHA.3952@xxxxxxxxxxxxxxxxxxxxxxx
Any harm in denying log on via TS to the local Administrator Group?

Since our domain's TS is available from outside networks I thought this
may provide some security benefit.

Thanks.





.