Review which users can "Access this computer from the network"
This user right determines which users and groups are allowed to connect to the computer over the network. Remote Desktop Services are not affected by this user right.
Note: Remote Desktop Services was called Terminal Services in previous versions of Windows Server.
Default on workstations and servers:
Default on domain controllers:
Enterprise Domain Controllers
Pre-Windows 2000 Compatible Access
Policy Path: User Rights Assignments
Policy Setting Name: Access this computer from the network
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.