' Modify Terminal Service Audit Permissions
Const WINSTATION_QUERY = 0
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery _
("Select * from Win32_TSAccount Where AccountName = 'fabrikam\\bob' AND " _
& "TerminalName = 'Accounting'")
For Each objItem in colItems
errResult = objItem.ModifyAuditPermissions(WINSTATION_QUERY, False)
ext