You use a client computer named accounting that has Windows 7 SP1 installed. The computer allows
connections from other computers that have any version of Remote Desktop installed. The
computer has a locally attached printer shared as printer1.
An accounting user group is a member of the local Remote Desktop Users group on the computer.
Only the Accounting Users group has access to printer1. A user named User1 is a member of the
accounting users.
You need to configure the computer to meet the following requirements:
• Prevent User1 from establishing Remote Desktop sessions to the Accounting computer.
• Allow other members of the Accounting Users to connect to the accounting computer by
using remote desktop.
• Ensure that User1 can access printer1.
What should you do?

A.
Remove the Accounting Users group from the Remote Desktop Users group.

B.
Remove User1 from the Accounting Users group.

C.
Assign the Deny access to this computer from the network user right to User1

D.
Assign the Deny log on through Remote Desktop Services user right to User1.

Explanation:
D is the only method that can achieve this without affecting other groups.
A and B could be equally valid by adding an additional step (adding individual users to resources).