Actually, I continued to search and
Control Panel -› Administrative Tools -› Computer Management
-› Local Security Policy -› Local Policies -› Security
Options
and there you can use disable local login for users & groups, and
enable local login for specific users & groups
I did some tests and it worked for me.
>
>
> Only the domain administrator can specify which users can log into
> which machines.
>
>
> --
>
> Bruce Chambers
>
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> They that can give up essential liberty to obtain a little temporary
> safety deserve neither liberty nor safety. -Benjamin Franklin
>
> Many people would rather die than think; in fact, most do. -Bertrand Russell