How can I set a specific user log on neme to a specific machine

Question

Greeting,
I have a question : 
How can I set a specific user log on name to a specific machine.
e.g. 
Only User.A can log on to PC.A and the other can not.
Base On :
Windows Server 2003
Active Directory Version : 5.2.3790.1812

Answer 1

Technically we're both right.  This depends on what scenario you're setting this up.
1)  If you want to say only this person can log on to this machine, and it's not an enterprise solution (meaning you have a handful of computers you want restricted, not all computers) then do something like Yan Li has recommended.  However, I
do not recommend using any DENY LOCAL LOGON user rights.  In this case, you would have to deny everyone except 'User A' and your Administrators.  If you put a user in ALLOW LOCAL LOGON and DENY LOCAL LOGON, then DENY wins and no one logs in.  Instead,
you should remove all the settings from ALLOW LOCAL LOGON and add only User A and administrators.
2) If this is an enterprise solution, use the LOG ON TO option I mentioned before.  Managing user right assignments per machine is very difficult and isn't a practical way to do it on a large scale.  If every user in your domain is assigned a computer
that they can use, only that user can use that machine and that machine will effectively only allow that user.  For this to work, EVERY user must be restricted to a workstation, if no setting is present, then that user can log on anywhere.  This
is my preferred solution still.
Like I said, it depends on your situation to which route is better.  I hope this helps and is clear and easy to understand.
- If you have my posts to be helpful, or the answer, please mark them appropriately.  Thank you.
Chris Ream