If the inputs specify an Active Directory user, the caller must be a DomainAdmin, OrgCreator, or OrgAdmin. OrgCreators and OrgAdmins are allowed to change this setting only for users in their organizations.

If the inputs specify a local machine user, the caller must be a domain user who is an administrator of the specified server.

<request>
  <procedure>
	<execute namespace="Managed Terminal Services"
			 procedure="TSEnableUser">
	<executeData>
		<user>CN=Mary Customer,OU=Hosting,DC=Fabrikam,DC=com</user>
		<preferredDomainController>dc1</preferredDomainController>
	</executeData>
	</execute>
  </procedure>
</request>