In deploying a server, today, I forgot to enable the Remote Desktop service for administration of the system, and I hadn’t yet joined it to the domain. I was pretty sure that it would be possible to change the setting via the registry, so a quick google search turned up this:
psexec \\machinename reg add “hklm\system\currentcontrolset\control\terminal server” /f /v fDenyTSConnections /t REG_DWORD /d 0
I added psexec’s -u parameter, since I needed to specify the local system’s administrator account. worked like a champ. Thanks, Tony, for the clear documentation.