I need to have my environment set to not allow regular users to store their credentials for Apps or RDP. However, I need to have some accounts, mostly service accounts, be able to store credentials.
How would I be able to exclude them because AFAIK "Network Access: Do not allow storage of passwords and credentials for network authentication" is applied to computers and can only exclude computers, not users.