Mastering Active Directory

Creating authentication policy silos

Now that we have the authentication policy created. The next step is to create a new authentication policy silo. My requirement is to create a policy silo to prevent the user account Peter to REBEL-PC01.

Policy silos can be created using ADAC or the New-ADAuthenticationPolicySilo PowerShell cmdlet:

In the demo, we are going to create a new authentication policy silo called Restricted_REBEL_PC01:

New-ADAuthenticationPolicySilo -Name Restricted_REBEL_PC01 -UserAuthenticationPolicy AP_1hr_TGT -ComputerAuthenticationPolicy AP_1hr_TGT -ServiceAuthenticationPolicy AP_1hr_TGT -Enforce

In the preceding command, ...