How to stop authorized users from logging into other servers

[fwells11]

If I create a domain group and use MS Logon for authentication, I have found that members of the domain group can login to any other computer running VNC server that is configured to use the same group.

I only want network administrators and the computer owners (assignee) to be able to login to a specific computer. Can I achieve this without having to create Local Groups\Accounts or multiple domain groups?

[alanro]

"members of the domain group can login to any other computer running VNC server that is configured to use the same group."?
I will try this, I think it is useful for me, Thanks.

[Marscha]

with mslogon II, you can can authorize individual users.
So just add the computer owner's account to MS-Logon II.
Obviously this is a per machine setting.