Resrict Certain User From Logging onto a Certain PC

[anthonymel]

I was wondering is there a way to prevent a certain user from logging on to a certain PC. We have this user that seems to logon to machines that he shouldn't be near. Can I stop him from logging on through group policy or does it have to a local security matter?

Thanks,

Anthony

 

[aftertaf]

if its a single case... you can chosse which PCs a user can log onto with his user object in Active Directory.

if you have many users etc...

you can define a security group, add users you want to allow access,
and you use a GPO:\computer config/windows settings/security settings/Local Policies\User Rights Assignment\Log on locally and add the group.

apply gpo to an OU containing concerned PCs...

Aftertaf

"Solutions are not the answer." - Richard Nixon