Restricting Login for specific computers by group

[Blind]

I have some teacher computers in my labs that I wish to prevent students from having access to. Is there an easy way to prevent them from logging on? They are XP boxes on a Windows domain with lots of group policy running.

[FN-GM]

If you put the computer in its own OU or create another group policy in its current OU and set the security so that computer can only upload the policy. Then in group policy define the users/groups that are allowed to logon or that aren’t allowed what ever is easiest. In the group policy its under Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Logon Locally / Denny Logon Locally

Or you could create a policy in on the computer ou and then set the security so only one group can apply the policy.

Also look at http://www.edugeek.net/index.php?nam...wtopic&t=11099