We are converting an old windows NT domain to a Samba domain. All appears well in testing, however we need to limit certain users to have permission only to log in to their specific workstation.

If someone tried logging into my workstation with their account (even though their account is a valid domain account) - I need it to reject the attempt.

Is there an easy way to do this? Is it even possible?