how to allow only AD domain members

Hi, I configured to authenticate (via winbindd) against AD. It works, but it is possible to authenticate as well on non-AD-member devices with an AD user. Is it possible to authenticate only with the mandatory criteria "AD membership"? Thank you. Regards, Wlater