how do i restrict log on to an individual PC

I have a pc that i need to install certain tools and and software. I need the PC to be part of the domain but i only want a few people to be able to log on to it. They need to be able to log on to other pc’s as well
i know that you can restrict a user to a pc, not sure how to go about doing this. can it be done?