Restrict some user to specific computer

[2muchreality]

I got some problem in my domain I need restrict the use of one computer by some domain users. I had tried to fix this problem by creating a new seperate OU, and then create it in a new group which has the user that will allowed to work on the computer, then went to Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> User Rights Assignment >> Allow Logon locally and allowed user accounts created with a GPO for the machine, though any user can login on the computer. So, does anyone has any solution for this issue? Thanks.

[anshusehgal]

I guess that GPOs can be applied to users or computers and not to security groups, located in the OU where the GPO is linked to. If you want to limit access to a computer then you can use the account tab on the user account properties in ADUC, there you will see a button "Log on to" where you can limit the machines where that user can logon to.

[2muchreality]

Thanks for the wonderful suggestion, that really worked.