restricting access to pc on the network 1

[tracer1]

how can i restrict normal users from logging in to a pc in our network?
basically, this pc is supposed to be used for a specific purpose and is logged in as a specific user, but people just log it off, log themselves on and do their stuff. how can we restrict this pc so only the specific user and the domain admins can log on to this pc?

thanks guys...

 

[brontosaurus]

create a separate OU for that PC. Then place a policy on the OU that defines specific user accounts for the "log on locally" value.

 

[tracer1]

thanks for pointing me to the right direction bronto....