Specify access control conditions that restrict devices that can request a Ticket Granting Ticket for the service accounts ...

Specify access control conditions that restrict devices that can request a Ticket Granting Ticket for the service accounts assigned to this policy. 

Note: NTLM authentication cannot be restricted by access control conditions. Users should be members of the Protected Users group, which does not allow NTLM. 

Click Edit to define the conditions.