Block users from child domain from using other workstations.

We have a computer lab with a DC setup as a child of our main domain. We would like to limit these lab users to only lab computers and reject logging onto systems within the organization. Is there a Group Policy that will allow me to enter acceptable systems that students can log onto?