I was recently asked how to modify the rdp permissions on a large number of Windows 2000 SP4 servers running in Remote Admin mode.  Well, normally Id make use of WMI and make the changes using Win32_TSPermissionsSetting class.  Unfortunatly this class is not available in Windows 2000.

To get around this issue in Windows 2000 try the following:

  1. Create a domain group and manually assign the permissions to the RDP-Tcp connection on a single server
  2. Export the following reg key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\Security (REG_BINARY)
  3. You can now import this reg key on any number of servers across your enterprise.  Since the change was not made using the API you may have to reboot the server