Ideas wanted on account restriction

[Brad]

We are looking for a method to prevent a certain user account from
logging in interactively, while still being able to use elevated
rights (on same account). Since entering elevated rights is an
interactive login, this doesn't work.

Any other ideas? I've thought of login script to log them out, but
this is easy to bypass, and I also would not like them to process user
GPOs. Looking for a clever plan! Thx

Brad

 

[jamesvdm]

Hi Brad

Are you in a domain environment using group policy?

You could create a group policy just for this user which disables
interactive logon.

James