This question is to do with a DC on a computer and not Azure AD.
Users, when created, in an Active Directory domain can, by default, log into all computers that have joined the same domain.
Active Directory Default Domain User permissions?
- Do I need to apply an GPO [group policy] to prevent this behaviour?
- Would the process be like this:
a. create an OU [as by default the computers are in a container and not an OU; GPOs only apply to an OU]
b. move all computers to that OU
- What does the GPO look like? A screenshot would be great!
Thanks for any help. I'm sorry if this has all been documented somewhere else but I cannot find this info elsewhere simply stated.