Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

server 2008 r2 remote desktop users

I have got to audit a server for local group memberships, one thing that stood out was the default "remote users group" had no members? In this case how can admins use mstsc.exe to remote onto the server? Can this type of access be controlled by other means?
ASKER CERTIFIED SOLUTION
Avatar of Boyd (HiTechCoach) Trimmell, Microsoft Access MVP 2010-2015
Boyd (HiTechCoach) Trimmell, Microsoft Access MVP 2010-2015
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

I assume the top option from what you have said but I will check.
The mode is not responsible for that behavior.
Please check the following policy: http://technet.microsoft.com/en-us/library/cc758613(v=ws.10).aspx
Allow log on through Terminal Services


Description


This security setting determines which users or groups have permission to log on as a Terminal Services client.

Default:
• On workstation and servers: Administrators, Remote Desktop Users.


• On domain controllers: Administrators.

That's why.