EXPERT RESPONSE
The easiest way to do this is to remove the right to log on locally at the server. This can be done by running the "Local Security Policy" MMC plugin located in the Administrative Tools start menu/control panel. Expand "Local Policies" and "User Rights Assignment" and edit the "Log On Locally" right accordingly (I recommend only allowing Administrators to log on locally).
Click here for more information about this right.
View questions and answers from all of our Windows security experts here.
|