reply to GlazedHam
Re: Restrict who can login to a certain computer on a domain I use roaming profiles for the desktop users. However, I use folder redirection so that the My Documents folder stays on the server in their home directory. It is great because if a user's desktop goes on the fritz then I just move them to another prebuilt and then rebuild the messed up one.
Yes you can restrict who can login to a specific computer, but I have only done it once for a particular user that has to remote desktop in to a virtual machine. I think you just go to the local computer and specifically set in the local machine what users are allowed to login.