How to Block a Domain user/group to login a system locally

Option A: Configure "Deny logon locally" user right on the local computer/s.

To eliminate the option to logon to one or few computer of a particular domain user or group, follow the instructions bellow:

1. Press Window+R to "Start" -> "Run"

2. Write "Gpedit.msc" and OK

3. Select Computer Configuration

4. Window Setting

5. Security Setting

6. Local Policies

7. User rights assignment

8. Double click on “deny logon locally”

9. Add user and group

10. Type name and click on check name

11. Type domain user id and password

12. Select name

13. OK

14. Apply than OK


Option B: Remove "NT AUTHORITY\Authenticated Users" uses from the list of users group.

To eliminate the option to logon to one or few computer, follow the instructions bellow:

1. Right click "My Computer" icon on the desktop.

2. Choose on "Manage".

3. Extract "Local Users and Groups".

4. Click on "Groups".

5. In the right side of the screen double click on "Users" group.