Help with AD/multiple access

[xolixire]

I have a network that consists of over 1400 machines and 300 users.

How could I get all users to login, using their same login ID, into their personal workstation and have normal user rights, but have more restricted rights on another workstation (ie. internet cafe') without having same access as they would on the workstation? I want to be able to track the usage by monitoring the internet cafe' using the user's login ID, however, I do not want it to affect their rights on their workstation in the offices.

 

[WhoKilledKenny]

I would creat an OU in AD for the Internet cafe machines. Place the PC in the OU and create a GPO to restrict the access.