icacls c:\Windows\System32\termsrv.dll /grant Administrators:F . : Run net stop TermService .
This method involves directly modifying the binary code of the termsrv.dll file. This is the most reliable way to avoid detection by antivirus software. Termsrv.dll Patch Windows Server 2019 REPACK
In older versions (Server 2008/2012), a classic pattern was: icacls c:\Windows\System32\termsrv
