Limit logon priledges to specific stations

[CIS]

Ok maybe a no brainer but.... I have a potentially
dangerous user in a Win 2000 Domain with XP Pro stations.
I want to limit the logon privleges for this user to only
1 PC. Is there a group policy or area to effectily do
this to either a user or organizational unit

 

[David Jones]

If this is only one user, you don't even need a GPO.
On the domain controller open the Active Directory Users
and Computers snap-in/Administrative tool.
Find the user in question, and select Properties.

Click the Account tab, and click the "Log on To" button,
and add only the computer you want to allow. (I'm
checking on a 2003 server, so it might be in a slightly
different spot. If so, check the snap-in's help file and
it'll tell you)

They'll still be able to log into any machine with local
user accounts if they know any, but they will only be
able to log into the machine(s) you specify with their
domain account.