I can restrict what workstations/servers a user can log on to via the account tab on the individual user. You manually enter 1+ computers that they are able to log on to. However, it does not appear that you are able to add AD groups for this same user account restriction. Is this really the case?
If so, how is this possible? We have lots of situations where being able to add a group of computers would be very handy and save significant time. Our call centers is a great example, where users may use one of 5-10 different computers, and we don't want them being able to log on to additional computers on the same floor. There are lots of other examples as well.
So I'm just double checking that my Googling results are correct, and there isn't a way to implement this with AD right out of the box. (I did find some add-on software that appears to let you do this.)