Dsiable pupils group access to certain client PCs and Laptops?

[klop]

Hi, I want to be able to disable certain groups (pupils) from being able to log in to staff laptops or certain PCs within the school

I'd also like to allow only TAs access to a couple of PCs in the staff room (all teachers have laptops but use the PCs - giving the TAs nowt to use!)

Either of these possible?

thanks

[TheLibrarian]

Group Policy is your friend!

Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Assignment >> Allow log on locally

[klop]

I do believe you are a star!

Thank you