Pardon my naïveté. I am not a technical person. We are using Windows Active Directory for user authentication, for example to login to workstations (PCs), for Citrix, etc.
There is a quality requirement to disable a user account after multiple incorrect login attempts for a particular application 'xyz'. I am aware that Active Directory provides the functionality to disable user after multiple incorrect logins.
My question is, if I create an AD group specifically to access this application, can I set rules/policy to disable access only to this application such that the user will still be able to login to their workstation, Citrix, etc?