We have created a user that is used for a helpdesk role. This user is used by the people sitting on the helpdesk, and is not personal.
Since people rotate between helpdesk role, 1st and 2nd line, the persons on the helpdesk workstations are not always the same. We want to restrict the use of the helpdesk user to just those few workstations.
Has anyone tried to restrict ServiceDesk users on a workstation? I should probably mention that these people are also responsible for desktop support, so they can achieve admin rights on all workstations.