So you want to stop normal accounts (those with UserAccountControl attribute value of 512) to not logon locally but allow them to connect to the domain by some remote connection? What would they use to connect locally on first? Would it be a non-domain client?
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.