A user that has no authentication within CRD Windows NT nor CRD authentication can change the settings.
Explanation:
CRD automatically has an automatic logon thru TS, if a user logs on to TS that has no rights in CRD, a dialog box displays switch to CRD authentication.
If a user says OK CRD changes all logon information to CRD authentication. Locking Windows NT users out.
This goes for anyone that logon to CRD without authorization not using TS