Restrict computer login to certain accounts
- Create OU for computers you wish to restrict
- Navigate to Computer/Policies/Windows Settings/Security Settings/Local Policies
- User Rights Assignment/Allow log on locally -> Enabled -> Administrators, Domain Admins, [Any Other Accounts/Groups]
- Security Options/Interactive Logon: Do not require CTRL+ALT+DEL -> Disabled