Prevening domain user from accessing Computer

I have joined a computer (PC1) to a domain control server (2008), and user able to login using their domain user account - although recently I have found out that even though the computer (PC1) do not connect to a server, user still able to access using their domain account.
Is there a way for me to restrict domain account user from accessing the computer (PC1) if they are disconnected from server?
Hope my explanation make sense to you guyz.

Thank in advance
 

jobeard

Posts: 13,899   +1,763
Lots to be considered. Joining a domain is intended to give the company admin configuration control of all the company users.
This is normal, expected and even proper for the company to do this.
restrict domain account user
hmm; only the company admin should be able to do this and almost always it is done using some scripts, NOT by loggin into your PC. So - - who is accessing your PC remotely, the admin - - how do you know this occurs?

PCs joined to a domain usually get a replacement for PC Login - - the network form and that creates a link to the domain controller.