By default, all Active Directory users in a forest are included in the Auto Zone. If you specify one or more users using this parameter, however, only the specified users and members of the groups specified in the auto.schema.allow.groups parameter can log in using their Active Directory account.
For example, to specify that only the users jane and sai.wu should be allowed to log on to computers in Auto Zone:
auto.schema.allow.users: jane.doe firstname.lastname@example.org
You can separate each user name by a space or comma and use double quotes or escape characters to include spaces or special characters in group names. For example,
auto.schema.allow.groups: jane.doe, "Alex Adams", jae\ chin