It is possible to restrict the users that can log on to the console of a domain controller? I would like to delegate authentication to our Active Directory server, but select which users may manage the domain. I see there is an authorization element, but it appears only to tell where the authorization data can be found. How do I map an AD group to a role for the console, if indeed the console is protected by a role?
Cheers,
Bert Laverman
