How to create an AD account that cannot log-in to any computers/servers, etc.?

Question

Hi there

How to create an AD account that cannot log-in to any computers/servers, etc.?

Thanks.

Answer 1

Hi. Thank you for your question and reaching out. I’d be more than happy to help you with your query

I have linked an article below that may help solve your issue. Here is what the article has to say:

Open the Properties window for the user's account in the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in. Click Log On To after selecting the Account tab. Next, choose The following machines, input the name of the workstation to which you wish to limit the user, and click Add.

REFERENCE: https://social.technet.microsoft.com/Forums/Lync/en-US/998cca5b-544f-4e3e-b800-4090f7253800/how-to-restrict-a-computer-to-specific-user-login-?forum=winserverDS#:~:text=Open%20the%20user's%20account%20Properties,user%20to%2C%20and%20click%20Add.

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.