What kind of object can be placed into logon workstations attribute

Question

Hello folks, I know that I can put into the logon workstations attribute domain joined objects like workstations or servers but what about azure joined devices, MMD?
I am asking in the matter of restricting the access of generic account to specific servers from a specific hosts.

Answer 1

Hello If you want to restrict account to login a machine, we could try to configure the following group policy. Local Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny logon locally or Deny logon from network