We have a few critical service accounts at my company. Occasionally someone attempts to login to one of these who should not. (Not nefarious, just trying to get a job done the wrong way.)
After a few failed attempts to login the account gets locked out. And ... bad things ... happen.
Is there a way in Active Directory to setup a User such that it will totally ignore a login attempt unless it comes from a white list of server names?
Note: By "totally ignore", I mean it can't login and can't be locked out by failed attempts.