You can change who is able to logon locally via user rights assignments,
but you should be very careful as it it possible to lock yourself out of
your computer. GPEDIT.MSC can be used to change the "Log On Locally" right
for your machine, but if it is apart of the domain the setting could be
over written by a domain group policy.
IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.