I want to make sure I understand what you want to accomplish.
When you talk about 'logging on to your machine', are you talking about logging on locally (at your computer), or accessing shared resources on your computer across the network?
Assuming you are talking the former (log-on locally), you can take 2 stepsto accomplish this.
1. Ensure that there are no other user accounts enableled on the local computer and disable the local guest account (Computer Management mmc | System Tools |Local Users and Groups | Users). This prevents anyone other than the accounts that exist on the local machine from logging on to the local machine (vs. the domain).
2. Set up a local Security Policy (Control Panel | Administrative Tools | LocalSecurity Policy | Security Settings | Local Policies | User Rights Assignments). There are 2 settings that may be used here: "Deny logon locally" or "Logon locally". Use the "Deny" setting with caution as it can have unforeseen consequences if you don't totally understand what you are doing. I would use the "Logon locally" setting and specify which users and groups from your domain are authorized to logon. This prevents any users other than those specified from logging on locally using their domain credentials. Be advised that if there is a domain security policy with different settings, the domain policy will opverwrite the local policy settings.
Hope this helps (and makes sense).
