how to set service accounts so they cannot be used to logon to a workstation or server

As a extra layer of security
Who is Participating?
Deny those accounts the "log on locally" right
or enable those accounts "deny log on locally"
You can do this by creating a security group and add all your service account to the group. Then create a GPO to deny logon local rights like AustinComputerLabs said to all workstations and servers.
Darius GhassemCommented:
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.