You can set Logon Time for Users in Active Directory for security purposes to regulate logon sessions. This will prevent you from signing in at any time.

Want to know how to set permissions in Active Directory for users? Using GPMC or AD for computers and users are the best methods.

For one thing, it requires support for an environment where users can rely on their Active Directory accounts for log-in to both Mac and Windows computers.

Still using Active Directory to manage identity for remote workers? You might want to consider moving to Azure Active Directory.