Can 2 different users login to the same device with their Entra ID credentials from same domain on the same Entra ID joined domain devices? If yes then how to prevent it? Give me detailed steps to prevent the users from the same domain to login to the E

Question

Can 2 different users login to the same device with their Entra ID credentials from same domain on the same Entra ID joined domain devices? If yes then how to prevent it? Give me detailed steps to prevent the users from the same domain to login to the E

Mytoast Admin 285

Can 2 different users login to the same device with their Entra ID credentials from same domain on the same Entra ID joined domain devices?

If yes then how to prevent it? Give me detailed steps to prevent the users from the same domain to login to the Entra ID joined device

For example:

User 1: ******@xyz.com

User 2: ******@xyz.com

and if they are trying to login to login with the same domain credentials but both are different users so how to prevent it?

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2024-12-02T06:35:12.51+00:00

@Mytoast Admin Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

2 answers

Your answer

Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator

2024-12-02T06:35:12.51+00:00

@Mytoast Admin Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@Mytoast Admin, For your question, I would like to say yes, two different users can log in to the same device with their Entra ID credentials from the same domain on Entra ID joined devices. In Intune, there's a policy setting "Allow Local Log" which we can configure the allow user to login the device. Here is a link with detailed steps for your reference.

https://petervanderwoude.nl/post/restricting-the-local-log-on-to-specific-users/

Note: Non-Microsoft link, just for the reference.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Mytoast Admin 285 Reputation points

2024-11-27T14:03:31.8833333+00:00

Hi,

Thanks for reply. I will check this and reply back
Mytoast Admin 285 Reputation points

2024-11-27T14:03:46.5466667+00:00

.....
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-11-28T06:12:06.48+00:00

@Mytoast Admin, Thanks for the reply. I know you will try. If there's any update, feel free to let us know.
Mytoast Admin 285 Reputation points

2024-12-02T16:40:40.0133333+00:00

Hi Crystal-MSFT

I dont think this is going to work as I checked it represents something else on this settings but I really did not get much time to test it yet.

Certainly, I will test it and update back here
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-12-03T02:07:51.6966667+00:00

@Mytoast Admin, Thanks for the reply. If there's anything during this time, feel free to let us know. As a note, please add a local admin as a backup to avoid any logging issue later during our test.

Answer 2

Catherine Kyalo 1,935 Microsoft Employee

Hi @Mytoast Admin

This has also been documented by Microsoft as seen below.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/restrict-use-one-domain-user-only

Share via

Can 2 different users login to the same device with their Entra ID credentials from same domain on the same Entra ID joined domain devices? If yes then how to prevent it? Give me detailed steps to prevent the users from the same domain to login to the E

2 answers

Your answer