How do I remove a user from "deny logon through terminal services"?

[hgate73]

I'm trying to remove users and groups from the "Deny Logon Through Terminal Services" setting in group policy (secpol.msc) via the command-line. How do I do that?

I was previously posting under "GeneralDzur" but hgate73 is my new username.

 

[hgate73]

The key I'm trying to flip is the "SeDenyRemoteInteractiveLogonRight" key, but searching through the registry doesn't give me anything

I was previously posting under "GeneralDzur" but hgate73 is my new username.

 

[linney]

If you really want to dive in and get dirty you could take a snapshop of your registry before making the change manually through the GUI and another one afterward and see if you can pick up any changes. This small freeware program may help you achieve this.

http://www.softpedia.com/get/Tweak/Registry-Tweak/Reg-Shot.shtml

Just some other bits and pieces for you to look at.

Accessing Terminal Services Using New User Rights Options

http://support.microsoft.com/kb/278433

Computer Configuration/ Administrative Templates/ Windows Components/ Terminal Services/ Allow users to connect remotely using Terminal Services. This might be the registry location for that setting but whether you can do what you are seeking to do so via that key is another matter?

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections

fDenyTSConnections

http://www.insidetheregistry.com/regdatabase/viewvalue.aspx?valueid=2115

Computer Management (Local)/ Local Users and Groups/ Groups, anything in there for Remote Desktop or Terminal Server users?