Windows 2008 Block or deny specific user remote desktop terminal services access

In group policy go to Computer Configuration\Policies\Security Settings\Local Policies\User Rights Assignment

Define the Deny log on through Remote Desktop Services policy

Add the users or groups you want to block from user remote deskop

Regards

Brendan King