Test‐UserRightsAssignmentSeDenyRemoteInteractiveLogonRight

Test-UserRightsAssignmentSeDenyRemoteInteractiveLogonRight

SYNOPSIS

2.2.25 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only) 2.2.26 Ensure 'Deny log on through Remote Desktop Services' is set to 'Guests, Local account' (MS only)

DESCRIPTION

This policy setting determines whether users can log on as Remote Desktop clients. After the baseline Member Server is joined to a domain environment, there is no need to use local accounts to access the server from the network. Domain accounts can access the server for administration and end-user processing. This user right supersedes the "Allow log on through Remote Desktop Services" user right if an account is subject to both policies.

EXAMPLE

EXAMPLE 1

Test-UserRightsAssignmentSeDenyRemoteInteractiveLogonRight

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.2.25    (L1) Ensure 'Deny log on through Remote Desktop Services' to include 'Guests' (DC only)             Group Policy Settings     True