Custom Solution: Active Directory Workstation Logons (Part 1) - Policy-Based Access Automation

---------------------------------------------------------------- Hello everyone, In this video, we build a centralized Active Directory solution for controlling which users and security groups can sign in locally to specific domain-joined workstations. Instead of creating separate GPOs for each user or computer, the policy state and allowed principals are stored on computer objects through custom Active Directory attributes and managed with a PowerShell-based admin console. 📄 Check out the companion article on our website for more information and related resources: https://www.techaptic.com/go/custom-s... We create the custom schema attributes, add them to the computer class, prepare the Logon Access Management GPO and deploy the Workstation Access Engine startup script. The client-side scheduled task periodically reads the latest settings from Active Directory, stores a local cache and applies the required Allow log on locally configuration. We then use the admin console to enable the policy, assign users and security groups, validate synchronization, inspect the cache, logs and recovery baseline, and test how access changes behave for denied users and support-group members. The video also covers the rebaseline mode used for exceptional recovery scenarios. ⏱️Video Chapters ----------------------------- 00:00 - Introduction and Solution Overview 01:42 - Architecture and Active Directory Attribute Design 04:53 - Active Directory Schema and Custom Attribute Configuration 09:05 - GPO and Client Prerequisites 10:46 - Deploy the Workstation Access Engine and Admin Console 13:57 - Configure Policy and Allowed Principals 17:10 - Validate Client Sync, Cache and Recovery Baseline 20:34 - Test and Update Workstation Sign-In Access 24:02 - Outro 🔗 Helpful Links --------------------------- • There are no helpful links in this one. 🧠 Techaptic Website ----------------------------------- • Home Page: https://www.techaptic.com/go/custom-s... • Advanced Searches: You can access our articles more easily and quickly with many search options. • Test Your Knowledge: You can take mini-quizzes we've prepared to test your knowledge level. • Copyable Commands: You can easily access the commands found in many of our articles. • Downloadable Files: You can download the files included in many of our articles (Subscription required). ‪@TechapticTR‬ --------------------------- You can visit our TR channel to find Turkish version of this video and many others.