Block Domain User login

active-directorydomain-controllergroup-policy

I have created a Domain User id ( for example – Auser ). I have integrated my LDAP login with Firewall. I use this user to login in to firewall only. So, I want to block all the login for this User except on Firewall.
Is there any way to accomplish this?

As per my knowledge, we can specify :-

  1. By right click on Domain User –> Properties –> Account tab –> Logonto ( but here we have to specify Computer Name, we don't have any computer name for Firewall — So i can't use this option )
  2. Through Group Policy Window Setting –> Security Setting –> Local Policies –> User Rights Assignment –> Allow logon Locally (But it has to apply on Computer OU — So i can't use this option also )

Any Other Option you know ??

Best Answer

IN ADUC --> Domain User --> Properties --> Account tab --> Logonto Enter your DC name ( both Primary and Secondary ), and than Check.

By Default, User can't login to your DC, so u don't need to worry and your problem will be solved. I has also solved by this way.