如果你的域控是Windows 2008，可以使用这两种方法：
http://social.technet.microsoft.com/wiki/contents/articles/4980.how-to-enable-or-disable-remote-desktop-via-group-policy-windows-2008.aspx
--------------------------------------------------------------------------------
方法1：
•Click Start – All programs – Administrative Tools – Group Policy Management.
•Create or Edit Group Policy Objects.
•Expand Computer Configuration – Administrative Templates – Windows Components – Remote Desktop Services – Remote Desktop Session Host – Connections.
•Allow users to connect remotely using Remote Desktop Services (enable or disable)
--------------------------------------------------------------------------------
方法2：
•Click Start – All programs – Administrative Tools – Group Policy Management.
•Create or Edit Group Policy Objects
•Expand Computer Configuration – Preferences – Windows Settings.
•Right click Registry – New – Registry Item.
•General Tab.
•Action :Update
•Hive :HKEY_LOCAL_MACHINE
•Key path : SYSTEM\CurrentControlSet\Control\Terminal Server
•Value name : fDenyTSConnections
•Value type : REG_DWORD
•Value date : 00000000 enable OR 00000001 disable
