Hey! This just pops me a great idea!

Only Administrator and Power Users should be able to log in any computer. Add the domain users to the local power users and that it! I find this idea somewhat interesting I might use at work!