Windows 2012 TS: Do domain users have server administration rights?

Question

Windows

Actually a subject. Google tormented, tormented, did not find the answer. I can't understand why ordinary users who are members of the "Remote Desktop Users" group are able to configure the terminal server to which they connect? Where to fix it?

Answer 1

see what roles are added to the security group

Answer 2

Check the rights of users in the domain and locally on the server. Well suddenly they somewhere became administrators.

Answer 3

1. Alternatively, log in to the server under this user and run gpresult /R /USER xxxxxxx in cmd. See what gpo is applied to it and where it is located.
2. Go to terminal service configuration and check permissions. www.prntscr.com/13ts3e . Screenshot 2003 server, but the essence is the same.

Answer 4

missed