Given lack of centrally managed infrastructure in the past when our company first started, our office has 4 different AD domains through out the Pan-America region. We've been trying to centralize these domains but there won't be any immediate result anytime soon.
Our on-prem 2016 servers will take all 4 domains logins because they are federalized. Is there anyway to restrict user logon to just one certain domain? The problem I'm seeing is user supposed to use their central domain AD account to login, but instead, they use they local office domain to login, which creates user access request to the site administrators when these users already have access using their central domain account. I know how to limit the people picker to search only certain domain, but it does not restrict the domain logins.