Planning Active Directory Protected Users membership and operational exceptions
Planning Active Directory Protected Users membership and operational exceptions Active Directory's Protected Users group applies nonconfigurable protections to its members on supported hosts and domain controllers. Microsoft describes the group as a defense against credential theft. It prevents credentials from being cached on devices, blocks NTLM, Digest and CredSSP default credential…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.