Restrict Access

Question

Hi All,

I have a domain admin account that I want to restrict. This account should only be used to log in to domain controllers and should not be allowed to log in to member servers. The requirement is that this domain admin account should be limited to logging in to domain controllers only, not to any member servers. please guide me.

Answer 1

Hello,

As far as I know, to restrict the "Login" function of a domain account so that it can only log in to certain computers and not others, you can use "User Properties" - "Account" - "Log on to" in Active Directory Users and Computers (ADUC) to achieve this. However, this method is only valid for ordinary domain users. If it is a domain administrator account, this operation cannot be achieved.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hello,

As far as I know, to restrict the "Login" function of a domain account so that it can only log in to certain computers and not others, you can use "User Properties" - "Account" - "Log on to" in Active Directory Users and Computers (ADUC) to achieve this. However, this method is only valid for ordinary domain users. If it is a domain administrator account, this operation cannot be achieved.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

You can not restrict an Admin account, that's not possible.