Terminal Servicves users are granted additional permissions so that older programs can run correctly on Windows 2000.
If you don't have any 'older programs', you can/should remove these additional permissions.
If you apply %systemroot%\security\templates\notssid.inf, your server will have the same default permissions as a standard Windows 2000 server, but Terminal Services will still be enabled.
To remove the permissions:
1. Open a CMD prompt.
2. Type: cd /d %systemroot%\security\templates and press Enter.
3. Type: secedit /configure /db notssid.sb /cfg notssid.inf /log notssid.log /verbose
If you change your mind, to can restore the default permissions and policies for all users and the default permissions for Terminal Services users. To restore these defaults:
1. Open a CMD prompt.
2. Type: cd /d %systemroot%\inf and press Enter.
3. Type:secedit /configure /cfg defltsv.inf /db defltsv.sb /log defltsv.log /verbose
NOTE: You should test a template before applying it to a production environment.
