Can i disallow root or other user login

[suzj801]

No description provided.

[evanlinde]

For root specifically, you can do this with the AllowRootLogin setting in /etc/xrdp/sesman.ini.

You can permit only specified users by adding them to a group (e.g. tsusers) and setting these settings in /etc/xrdp/sesman.ini:

TerminalServerUsers=tsusers
AlwaysGroupCheck=true

All of these settings belong in the [Security] section.

If you want to explicitly deny users instead of explicitly allowing them, you can do this via PAM. On CentOS/Fedora, the file you'll want to edit is /etc/pam.d/xrdp-sesman. This link should give you some idea of what to do:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-controlling_root_access#idm140656615618096

[metalefty]

It is possible as evanlinde says.

[suzj801]

@evanlinde it's useful. thanks
@metalefty

[brijeshjaiswal]

Awesome