Comment by nodamage

I'm not talking about checking against the domain, but checking against a directory of active users.