I have 4 users that need to only login to the machines i allow them.. the other 20 or so workstations need to give them the birdie when they try to login How can i do this with the least amount of administrative effort??

All my client PC's are XP pro sp2.

Hehe Veryyyy easy. The easiest, but longest ways, are to open Active Directory Users and Computer, find your user, right click > properties > Account tab > Log On to.. and add the computer names.

I suppose you could make a group or something, then add the restriction or similar..?

-lieb39