How to restrict a user to connect to only a group of computers?

Lotfi BOUCHERIT used Ask the Experts™
I have windows server 2008 r2 and active directory infrastructure managing hundreds of users.
I would like to restrict some users to logon to a specific group of computers. For example, in site A containing 10 users and 10 computers, i would like to restrict a specific user to be able to login to only those 10 computers in all the infrastructure.
How can i achieve this please?
Thank you.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Technical Specialist
Awarded 2017
Distinguished Expert 2018
That is already built into AD. Look under account info on user. You might need to add more devices than what the users actually log on to

as said by Mr. Shaun it right... at domain level

if you are considering seciruty... and have manageable switches the best option is saggregate network with Vlans ...

all the best

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial