Setting up a terminal server?

Question

RDP

Colleagues, good afternoon!
Prompt please, what rules you use or base on a terminal server?
Let's say: prevent users from clicking "shutdown", close access to the system disk, etc.

Answer 1

The main rule is that users work under the rights of ordinary users, no admin or extended rights.

Answer 2

Users don't have a "Shut Down" button anyway, only a session. And so: AppLocker, I basically configure the rights to disks and folders. By default, for ordinary users, many rights are already very limited, even more restrictive for some specific tasks or in case of aggravation of paranoia in the Security Service) In general, it is difficult to give some kind of universal answer if a spherical terminal server is considered in a vacuum.

Answer 3

Change the terminal server port from 3389 to something else if you plan to connect outside