Restrict user from logging according to group and time

Hi~

 

Are there any other identifiable checks you could make for those who do not have the time restriction? like client cert or machine cert or RegKey or something like that? For instance, you could do a check for client cert (early in the process) knowing only certain (internal employees) folks would pass - then they get to authenticate and access resources. You could then build a fallback path (for those without certs) which could still check AV/FW, etc, along with the Time restriction. That would allow those without restrictions access and the others would have to abide by the time designation. You could also add time restriction to the resource - meaning you might still 'let them in' but limit what resources they have access to depending on the time.

 

 

ps