Disabling User logon at certain workstations

[baldhead]

Is there a way through group policy or active directory to disable users from logging into certain workstations? I can see where to go if you want to specify the workstations thay can login to, but I'm looking for something to do the reverse. I don't want to have to go to each user account and add all the computers I want them to be able to login to. I just want to add this one computer which I don't want to allow them login access on. any ideas on this?

thanks
baldhead

 

[puffingbear]

Just had a quick peer thru the GPOs; give this a try.

Under "Computer Configuration",
"Windows Settings",
"Security Settings",
"Local Policies",
"User Rights Assignment"

You should see a GPO called "Deny Logon Locally"

Within that GPO you can add Users and/or groups to the "Deny" list.

Hope this sees you right

P