We have the need to assign the Deny Local Log On user rights to certain user accounts. On our traditional managed Windows devices we configured this by assigning this user right to an AD group … Continue reading Assign Deny Local Log On user right to an (Azure) AD group by using Microsoft Intune