Deny domain logon from specific machines

Hi guys,

The title says it all really – there must be a way to do this, but I can’t find it.

I need to specify which PCs a specific user group can logon to the domain from. I know how to do this with local logons, but not domain logons.

Any help would be much appreciated.

Thanks

Si