What command to use when creating a trigger to disable a user when logging in via RDP?

Question

Information Security

In general, I tried to find a solution to the issue of restricting the entry of one of the users to the server, AD started scolding about the RDP and I didn’t set it, I decided to just create a task when this user logs in, so that when he logs in, he is immediately cut off from the server and work was impossible. What program and command to this program can be used? shutdown.exe with some arguments?
windows server 2008 r2 if what

Answer 1

Through the rights to limit it is no longer possible?

Answer 2

Do not expose remote desktop directly to external networks, use Remote Desktop Gateway. It allows you to control who and where has the right to connect.
https://technet.microsoft.com/en-us/library/hh7087...