You can use Group Policy, either domain or local, to configure
Deny log on locally right. This right is located under: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny Logon locally
If a user also has remote access granted to a machine, you can deny their logon through Terminal Services. This right is named
Deny log on through Terminal Services.
"Deny domain local group" means to deny members of a local group
Deny log on locally.
Found here:
http://serverfault.com/questions/223029/how-restrict-domain-users-login-to-a-paticular-domain-client-machine-except-one
When you see answers and helpful posts, please click Vote As Helpful,
Propose As Answer, and/or Mark As Answer
Jeff Wharton
MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCPD, MCSD, MCITP, MCDBA
Blog: Mr. Wharty's Ramblings
Twitter: @Mr_Wharty
MC ID:
Microsoft Transcript
