RE: Account as a service without Interactive logon?
Just follow the belos steps to configure the Logon PC for that particular account to prevent login to any other computer in the domain;
- Go to Active Directory and computer MMC.
- Right click the user account.
- Click Properties > Account tab > Log On to button.
- Select "The following computers" option and leave the computer list empty.
That’s it.
Re: Account as a service without Interactive logon?
The very first thing I would like to know is why actually you want to prevent interactive logon? If you know service accounts don't need to be able to "Log On Locally", as long as "Log On As A Service" is set. Neither the service accouts should generally have administrative-level privileges. Also if your service account has the administrative privileges then you can undo any attempts to restrict the account from logging on interactively anyway. Hope it helps you.