This article applies to BHCE and BHE

From Principal to Computer: Principal has the SeRemoteInteractiveLogonPrivilege on the Computer.

For RDP access the principal also needs membership in the computer's local Remote Desktop Users group, which related to the edge MemberOfLocalGroup. When RDP access is possible, the prinicpal will have the edge CanRDP.

Abuse Info

This edge alone does not enable abuse.

Opsec Considerations

No opsec considerations apply to this edge.