[ActiveDir] blocking user access to terminal services via group policy

I'm having a hard time figuring out the best way to block terminal service access by user using group policy- is this something that can be addressed by a user configuration setting or is this an issue better handled on the terminal server- i.e. granting or denying 'log on locally' rights? I'm

RE: [ActiveDir] blocking user access to terminal services via group policy

veDir] blocking user access to terminal services via group policy I'm having a hard time figuring out the best way to block terminal service access by user using group policy- is this something that can be addressed by a user configuration setting or is this an issue better handled on the