Limiting AD logons

[jerrytownsend]

I want to prevent student active directory users from logging on to dedicated faculty teaching iMacs.

[sshort]

Sure, you can use a Login Window configuration profile to restrict logins to specific AD groups/users.