Specify access control conditions that restrict devices that can request a Ticket Granting Ticket for the user accounts assigned ...

Specify access control conditions that restrict devices that can request a Ticket Granting Ticket for the user accounts assigned to this policy. 

Note: NTLM authentication cannot be restricted by access control conditions. Users should be members of the Protected Users group, which does not allow NTLM. 

Click Edit to define the conditions.