How to restrict a computer to specific user login for AzureAd system!?

Question

How to restrict a computer to specific user login for AzureAd system!?

Ed Kutsko 0

I saw this thread while searching. https://social.technet.microsoft.com/forums/windowsserver/en-US/998cca5b-544f-4e3e-b800-4090f7253800/how-to-restrict-a-computer-to-specific-user-login-

What is the AzureAd equivalent for this On Prem AD function?

Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-05-12T11:13:06.79+00:00

@Ed Kutsko

Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer(Yes)" and "share you feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-05-29T03:34:47.6033333+00:00

Hi @Ed Kutsko ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-05-12T11:13:06.79+00:00

@Ed Kutsko

Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer(Yes)" and "share you feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-05-29T03:34:47.6033333+00:00

Hi @Ed Kutsko ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Akshay-MSFT 17,956 Microsoft Employee Moderator

@Ed Kutsko

Thank you for posting your query on Microsoft Q&A. From above description I could understand that you want to allow certain users to signin onto AAD joined devices.

Please do let me know if this is not correct.

We don't have a direct option in Azure AD to allow/restrict user on windows devices however this could be achieved via Intune using custom CSP.

As per UserRights/AllowLocalLogOn, this user right determines which users can sign in to the computer.

Example:

OMA-URI: ./Device/Vendor/MSFT/Policy/Config/UserRights/AllowLocalLogOn

Data Type: String

Value:

<![CDATA[AzureAD******@contoso.com&#xF000*;AzureAD******@contoso.com]]>*

User's image

(adding screenshot as clipboard is not copying the differential)

Once applied the non authorized user would get following message:

User's image

Please do let me know if you have any queries in the comments section.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes), and share your feedback if the suggestion answers you’re your query. This will help us and others in the community as well.

Simon Clewlow 0 Reputation points

2024-01-08T18:57:34.96+00:00

This is the wrong way round.

This is applying the restriction to a computer, not the account. In AD world you can set the account to only logon to specific computers. In your example, the computer only allows logon from specific accounts. But that account could still logon to other computers.
Tai Pham 0 Reputation points

2024-04-11T13:51:09.47+00:00

that is only for AD, this is different, this is for Azure AD. Azure AD and Azure Join devices does not see that setting. Azure Join Computers are different

Share via

How to restrict a computer to specific user login for AzureAd system!?

1 answer

Your answer