Deny Interactive Login While Allowing SCP/SFTP (4232279)

Deny Interactive Login While Allowing SCP/SFTP

Can interactive login be denied while still allowing SCP/SFTP?

At this time there is no way to allow SCP/SFTP while blocking SSHD as both of these are reliant on the SSHD service, however, the interactive login can be denied by changing the user's shell to /bin/false by following the steps here: How to disable a user account from the command line

This can also be done within Active Directory by navigating to the Unix Account tab within the user's account properties and changing the Login Shell to /bin/false.

By changing the user's shell to /bin/false the user is denied access to a shell upon login thus the interactive login is denied while still allowing the user access to services reliant on the SSHD service.