Restricting domain user account from logging on certain member workstations

[MikeM]

I have a domain and I want to restrict the ability of certain domain user
accounts from logging on a particular member workstation. How do I limit
which computers certain domain users can logon? I tried setting the local
security policy, "deny local logon" and I applied the the domain user
account I wanted to restrict, on the workstation where I wanted to
retriction - but it did not keep them from logging on.

Please tell me how to do this. Thanks.

 

[Guest]

yes inside local security policy,

Local Policies\User Rights Assignment\Deny logon locally

add the users in it.

 

[MikeM]

I logged on as Administratior, set the policy on the workstation I wanted to
restrict logon for the particular domain user account, logged off the
workstation, and then logged on using the domain user account that I wanted
restrictions for. I was not denied access. What went wrong?