A.InTerminalServicesConfiguration,changethepermissionsforRemoteDesktopUserstoFullControl.
B.InTerminalServicesConfiguration,changethesecuritylayersettingtoNegotiateandsettheencryptionleveltoHigh.
C.InLocalSecurityPolicy,enableDomainMember:Requirestrong(Windows2000orlater)sessionkey.
D.InLocalSecurityPolicy,enableDomainMember:Digitallyencryptorsignsecurechanneldata(always).