Step 1 ndash enable lsquo audit logon events rsquo run gpmc msc command to open group policy management console if you want to apply this on whole domain then right click on the domain object and click on create a gpo in this domain and link it here hellip note if you do not want to apply this on whole domain then you can select any ou rather selecting a domain.

Service accounts should be configured to log on only during a specified time of the day you can implement this plan by using the ldquo log on hours rdquo option that imposes time and day restrictions to apply that setting click ldquo logon hours rdquo in hellip.