Enforce user logon restrictions This security setting determines whether the Kerberos V5 Key Distribution Center (KDC) validates ...

Enforce user logon restrictions  This security setting determines whether the Kerberos V5 Key Distribution Center (KDC) validates every request for a session ticket against the user rights policy of the user account. Validation of each request for a session ticket is optional, because the extra step takes time and it may slow network access to services.  Default: Enabled.