A、Modify the Default Domain Group Policy object (GPO).Configure a computer-level policy to prevent the temporary employees from connecting to the terminal servers.
B、Modify the Default Domain Group Policy object (GPO). Enable the user-level Terminal Server setting Sets rules for remote control of Terminal Services user sessions.
C、On the Terminal Services Profile tab of the user properties for each account, disable the option to log on to terminal servers.
D、In the security policy for domain controllers, disable the computer-level Terminal Server setting Allow users to connect remotely using the terminal server.