We have a SP2013 farm using windows authentication. On the AD there are 10,000 user accounts and we have no edit permission on AD. (Hence, I cannot setup any group there) As the Sharepoint admin I only have a list of 1,000 users allowed to access. There is no existing group setup to indicate these 1,000 users.
My question is, how can I allow these 1,000 user login Sharepoint while blocking the other 9,000?
According to my understanding, user profile sync is different concept with sharepoint authentication. However, can I limit only the user with an existing user profile on Sharepoint to sign in?
My concern is the 9,000 users will get their My Site self-created when he browse the My Site web application. Another concern is when they access some page without authorization, they will get a form let them asking for access. The site owner may grant access to them by mistake which we want to avoid.