I am a system administrator and I do not want users to use
su - $appuser and try entering the password of the app user
sudo su - $appuser and enter their own password.
Some naïve users who are not aware try to do
su - $appuser and enter an incorrect password, by doing this the application user gets locked after 3 unsuccessful attempts (defined by the AD team; cannot be changed). We want to force users to use
sudo su -
Can this be achieved ?