Tips for not granting Terminal Server logon permissions when you log on to the server

When you log on to the server, we sometimes experience a prompt to log on to the remote computer, you must be granted permission to log on through Terminal Services ... ", by default, we see that what the prompt should take into account is that the domain account entered during remote login is not added to the server's remote administrative group or the local Administrators group.

But sometimes we also encounter a domain account that has been used to log on remotely to the local Administrators group or remote administrative group where the server is being logged on, but will still be prompted not to log in, as shown in the following illustration:

This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Servers/zs/

Encountered this problem before, but also do a lot of screening and inspection, the use of remote logins to the user to log in to the group is correct, and the use of other permissions account login can not log in, with the account can not log on to other servers, log on normally.

It can be seen that the server has made what restrictions, restricting the number of users can not log in;

Where did the restrictions go? In fact, the server's local security policy has restricted part of the account number, as shown in the following figure;

This article is from the "Clumsy birds have" blog, please be sure to keep this source http://tingdongwang.blog.51cto.com/1056852/845613