You could create a new GPO and apply it to the machines that you want to prevent the standard users from logging onto. In the GPO, under computer configuration, expand Windows Settings>Security Settings>Local Policies>User Rights Assignments and for the policy "Deny Logon Locally", simply add the users or groups that you do not want to allow to logging on to those machines. Hope this helps, Michael Pietrzak San Diego State University From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Frank B. Smith Sent: Monday, April 02, 2007 3:11 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Restrict Users from Logging onto a specific computer? Is there a GPO that would stop all of our users (except Admins and one other user account) from logging onto a specific computer? All users can log onto any of the pc's in the Domain right now, but I have one PC that I do not want them to be able to log into. Frank B. Smith