Deny Login to Machines to all except certain OUs
I'm trying to find a way of blocking all users from logging onto domain computers unless that have been added as an admin/power user/guest/user etc...
At the moment, anybody with an account can log onto which ever computers they feel like, and I've discovered that alot of kids and certain staff often go into the library and use the librarians computer when she's not there.
What I'd like to do is create an OU and add the 3 ladies who work in the Library on different days, and deny anybody from logging onto that machine except members of that library OU.
Any suggestions would be greatly appreciated!