How to limit a domain account in hybrid office 365 deployment to only office 365 logon

Zoldy2000
Zoldy2000 used Ask the Experts™
on
How to limit a domain account in hybrid office 365 deployment to only office 365 logon.    No local domain access or logon privileges.

User existed already and used to have local domain privileges and logon rights.

User now is remote and permanently only requires access to his office 365 email.      We want to remove all domain privileges and logon rights.      Is there an easy way to accomplish this as some rights may be explicit.

For example can we deny all logons accept office 365?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2015
Distinguished Expert 2018

Commented:
How are your users authenticating against O365? Generally speaking, they dont need any local rights to work with O365 services. You can even disable the account, unless you are using AD FS/PTA or any other form of authentication that relies on the on-premises AD.

Author

Commented:
We are in a hybrid setup and using AD sync to authenticate
Alan CoxSr. Architect | Consulting

Commented:
If just using hash sync, the authentication for O365 isn't relying on windows active directory.

Author

Commented:
Our Office 365 accounts are authenticating using our Active Directory that I know for sure.    i want to keep this while limiting this account.
Would this work for your scenario? Just thinking what'd be easiest here.
https://ravingroo.com/267/active-directory-user-workstation-logon-restriction/
- point them to some dead end..

Vasil is correct otherwise, although disabling the AD account might result in soft delete of the AAD account and its associated mailbox.

Cheers

Author

Commented:
Restricting the logon is exactly what I was looking for.   I simply restricted logons to a non existing computer name.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial