I am required to look after a Terminal Services 2003 machine. Occasionally company staff will create a new Active Directory user with no password and grant that user permission to login to the Terminal Services machine. This machine is exposed to the internet on port 3389.
How can I tell Terminal Services to reject login if the user account's password is blank?