Windows Domain SSH

• Create a service domain account that we will used to be able to login through ssh from a domain joined computer

• on the local computer
• regedit

Local Security Policy => Security Settings => Local Policies => User Rights Assignment 

• add domain user to these groups

Act as part of the operating system
Create a token object
Deny log on through remote desktop services
Log on as a service
Replace a process level token