Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Currently, I am using an account in the administrators group on a machine to kill the processes and stop/start windows services remotely using a tool written in c# (wmi) but this is causing issues because being in the administrator group also allows users to log on to the target machine via Remote Desktop and I don't want that.

What are my options here?

share|improve this question

migrated from Aug 12 '11 at 11:14

This question came from our site for professional and enthusiast programmers.

If the user doesn't need to log in at all, you can add it to the Deny log on locally security policy setting (or Deny Log on through Terminal Services, if you want to allow console login).

This can be done either through group policy on a domain or local security policy (secpol.msc); the setting is in Security Policies -> Local Policies -> User Rights Assignment.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.