Here is various tricks you can use in the Group Policy Editor in Windows.
Note a computer must be on a domain for this to work. See here for more information on GPO’s.
I go into more details in “Logon Preferences” and “Creating GPO’s”
To Deny Local Logins:
Navigate to: Computer ConfigurationWindows SettingsSecurity SettingsLocal PoliciesUser Rights Assignment
Go to “Deny log on locally” and the add the user to do not want to have local access to the server.
To Disable Balloon Notifications on the System Tray:
Run – gpedit.msc – User ConfigurationAdministrative TemplatesStart Menu and Taskbar
Switch to Enabled. Should be good to go.