I have a Windows 2008 Terminal Server. Terminal Server Configuration(licence server, session broker, etc) is managed by group policy. If i want to disable logon via:
change logon /disable
The Error Message: "Connections are currently ENABLED by Group Policy for this machine, unable to change."
Is there a smart way to fix this?
btw. is there some way to look into the session broker database?
Best Answer
There's a group policy setting that explicitly sets this, located here: Computer Configuration -> Administrative Templates -> Windows Components -> Terminal Services -> "Allow users to connect remotely via Terminal Services"
To fix the issue, you need to unset (not 'disable') this on the GPO. After a policy refresh you should get back the ability to control logon availability.