Protected Users and protected accounts

Source history: extracted from the page's source file at a commit; shared includes are not expanded

Settings and overrides named on this page

Registry values, policies and cmdlets the source mentions, with the dated steps that name them. Read the source for the values to set.

• AllowedToAuthenticateFrom
• AllowedToAuthenticateTo
• PowerShellAdd-ADGroupMember

Requirements, exceptions and scope

• Protected UsersRequirementExceptionScopeRecommendation6 conditions9 passages
  PowerShellAdd-ADGroupMember
• Requirements for using protected accountsRequirementException1 condition2 passages
• Troubleshoot delegation issuesRequirement3 conditions1 passage
• Provide DC-side protections for services and computersRequirementExceptionRecommendation2 conditions5 passages
• OverviewRequirement2 passages
• Restrict a user account to specific devices and hostsRecommendation1 passage
• Configure domain controller supportRequirement1 passage
• Create a user account audit for authentication policy with ADACRequirementException2 conditions3 passages
• Add computer account or group conditionsException1 condition1 passage
• Add computer claim conditionsExceptionRecommendation1 condition2 passages
• Troubleshoot missing computer claimsException2 conditions2 passages
• Configure Dynamic Access Control support on devices and hostsException1 condition1 passage
  AllowedToAuthenticateFromAllowedToAuthenticateTo
• Use the Authentication Policy Failures - Domain Controller administrative logScope1 passage
• Authentication policy silosRequirementException4 conditions5 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.