OK, I need help with ZenWorks and "Dynamic Local User"(DLU). Here's the idea- DLU policy allows certain users to log in to windows workstations without already having a local login account- the client/Zen agent creates a local account when you log in. Old news....

What I need to understand is how to allow them to login locally to some workstations and not others. Some time ago, this policy was only associated with users, and the workstation restrictions weren't a part of it. I need to know if and how this can be restricted by workstation in addition to the user group.

Thanks