ADDC. How to prevent users from logging on to computers, to the domain and using accounts only for authorization?

Question

LDAP

I want to authorize all users of corporate mail (Not Exchange) according to their accounts in AD. With office users, everything is clear, but there are also remote branches that will not be members of the domain, as well as employees without a workplace in the office. How can I properly authorize these remote users, but not allow them to log on to domain computers?

Answer 1

ADUC->User Properties->Account->Log on to->Only on specified computers, leave the list empty