How to implement " log on locally" via Domain Group Policy

Hello,

Thanks for always being very helpful.

My Goal:

I want to restrict one domain user to login to one computer only  (admin/root users to login to every computer).

I searched and I believe there is no such direct way to implement via the group policy unless I may add one GPO per user to implement"log on locally" from the group policy.

Do you have some VB script or other good way so I should not login to each computer one by one and edit the policy manually.

Thanks in advance.

Muhammad Asif Server Administrator Linux/Windows