Block certain domain users logging on to certain PCs

Posted on by

GPEDIT.MSC
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny Logon Locally

Add user or group

Source: mintywhite