Disable Remote Desktop for Administrator account....

[Guest]

Hi, This probably sounds a little unusual but is there a way I can prevent
logon via Remote Desktop using the local Administrator account?
I realize the default behavior in Windows is to automatically enable Remote
Desktop logon for any member of the Administrators group, but removing the
local Administrator account from the Administrators group is not an option
for me.
Thanks,
Barry

 

[Guest]

I should have dug further before I posted. I found a solution and thought I
would post it here in case anyone else has the need for this type of
configuration.
All I did was set the Local Policy on the target machine to deny Terminal
Server access to the local Administrator account (duh!) You can add/remove
local and Domain accounts for this policy as necessary using this method and
no need to modify local group memberships.

 

[Steven L Umbach]

It sounds like you configured the user rights for allow logon through
terminal services or deny logon through terminal services. By default the
allow logon through terminal services user right includes administrators and
remote desktop users. --- Steve