Scenario/Problem: You need to prevent users on a particular computer from logging on to AD DS.
Solution: Disable a computer account by using the Windows interface or the command line.
To disable a computer object by using the Windows interface, perform the following steps:
To disable a computer object by using the command line, perform the following steps:
Dsmod computer "CN=Desktop1,CN=Computers,DC=WS08DOMAIN01,DC=LOCAL" -disabled yes