Option to disable Remote desktop is greyed out on DC, is this normal?

[TwistedHelixis]

Just noticed that on each DC at each primary school I look after it is not possible to disable remote desktop, the option is greyed out. As far as I am aware they do not have any group policies to enable this. Is this just something that must be enabled on a DC?

 

BTW the DC is a VM, not sure if that has anything to do with it.

[ChrisMiles]

It is most likely forced on via group policy. You normally can't override group policy settings in the GUI.

[TwistedHelixis]

Just found in the Default Domain Policy it has 'enable remote desktop services'. Is this normally on by default or is this something the previous support company enabled?

[ChrisMiles]

No this is not normally on, and it's not best practice to add new settings to the Default Domain Policy anyways. You can remove it from there and create a new GPO if you want.