Allow log on through Terminal Services

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Allow log on through Terminal Services


This security setting determines which users or groups have permission to log on as a Terminal Services client.


  • On workstation and servers: Administrators, Remote Desktop Users.

  • On domain controllers: Administrators.

Configuring this security setting

You can configure this security setting by opening the appropriate policy and expanding the console tree as such: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\

For specific instructions about how to configure security policy settings, see Edit security settings on a Group Policy object.


  • This setting does not have any effect on Windows¬†2000 computers that have not been updated to Service Pack¬†2.

For more information, see: