Some guidance please. I have had a request to make the computers in a small\noffice domain to deny access to all other users except the computer owner.\nIN otherwards only the one person (and domain admins) should ever be able to\nlogin to their computer. I have not seen this but read about deny logon\nlocally, (Computer Configuration\Windows Settings\Security Settings\Local\nPolicies\User Rights Assignment) however can someone tell me if this is\npretty straight forward as I think I read that this is somehwat backwards\nsounding. Also do I need to enable loopback? All my computers are in a\ncomputer OU.