## Managing Logons The logon management feature allows you to enable or disable logons from RD Session Hosts. The feature performs the same tasks as the `change logon` command-line utility. Note: For RD Session Hosts based on a template, the drain mode (which disables logons) is handled automatically by the group to which a host belongs. For more information see Using Scheduler. To manage logons: In the Parallels RAS Console, navigate to Farm / <Site> / RD Session Hosts. Select an RD Session Host, click Tasks > Control and choose one of the following: Enable logons. This option performs the same action as the `change logon /enable` command. Disable logons and reconnections. Disables subsequent logons. Does not affect currently logged on users. This option performs the same action as `change logon /disable` command. Disable logons until server reboot. Disables logons until the computer is restarted, but allows reconnections to existing sessions. Same action as the `change logon /drainuntilrestart` command. To see the current logon control mode for an RD Session Host, click Tasks > Control. The checked-out option indicates the current logon control mode of the selected RD Session Host. To do this check from the command line, execute the `change logon /QUERY` command on the server. Please also note the following: When applying a logon control mode on a server, ensure that the agent status is updated accordingly. You must set the logon control options for the servers one-by-one. If you need to do it for a group of servers, you can use the scheduler (see Using an RD Session Host Scheduler). There's no option for disabling logons from new client sessions but allowing reconnections to existing sessions (`change logon /DRAIN`) because its behavior is identical to the Disable logons until server restart option (`change logon` `/DRAINUNTILRESTART`). Computer Configuration / Administrative Templates / Windows Components / Remote Desktop Services / Remote Desktop Session Host / Connection / Allow users to connect remotely using remote desktop services must be set to Not configured, otherwise it takes precedence.