How to deny access to a computer for a specific domain user?

Question

Active Directory

There is a domain controller, there are 5 other servers, there is a park of workstations. How to prohibit a specific domain user from logging in to some workstations and all servers? Thank you!

Answer 1

In the properties of the user account in AD, you can choose on which computers he can log in

Answer 2

according to Feng Shui: through GPO, prohibit "local login" and, if necessary, "access over the network" for the user on these workstations.
Dmitry Dmitry , do not advise bad, if a person has 300 PCs and it is necessary to deny access to 3, then this list will need to be entered 297 computer names MANUALLY, one at a time without prompts and choice !!!

Answer 3

.htaccess?