Multi-authentication or card reader

We're looking for a solution for a new building where we'll be having both physical computers and VDI instances within a room and since there is no physical security in place at the moment, we'd like to see if there is anything available to first provide physical security onto rooms as well as to possibly lock the machines if no one is in the room.  Here are the specs for our opportunity:

650 users
Windows 8/10
computers include VDI instances and desktop
AD integrated