Link to home
Start Free TrialLog in
Avatar of nav2567
nav2567Flag for United States of America

asked on

Disable interactive logon for all service accounts

Hello,

We created an AD account which is in the domain admin group and use it in some Windows Services.  

If I want to disable  interactive logon for this service account, what is the best way to do it?

Please advise.

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of Mahesh
Mahesh
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Same process as setting up a Tier as described in this article. Instead of isolating the GPO to some devices, apply it to all and add all the service accounts to the group which will be denied logon
https://www.experts-exchange.com/articles/29515/Active-Directory-Simple-Tier-Isolation.html