I'm currently doing an eval of ADSSPlus and I'm curious about how best to limit the users who can have access to this.
In some cases, we have generic accounts in our domains, mixed in to the same OUs and Groups as regular staff and students. I would like to be able to exclude these generic accounts from being able to log in, register and reset passwords (and ultimately use up licenses) within AD Self Service.
How can I best accomplish this within the application? Is there a way to select a group, or multiple groups and deny access?