Question: Hi there I am having a bit of a simple task problems.
We have pretty simple configured MS server 2012 in our school.
The thing is we want to deny access few PCs from ONE user so our students can only access library PC with their OWN account as we want to monitor their actions.

I have one user (library\_user) and this user should NOT be able to log on to three specific PCs. 

One way I thought is to delete the Domain User group to specific computers and create a new group with all users EXCEPT library\_user user. But there are so many users on "Domain Users" group that it would take a long time to add all users manually. 

Would this be the right way to get this done? Thank you

Answer: 
So finally my issue has been resolved. 
I have found another laptop with the same model, I replaced SSD and copied my data.
Thank you guys for your time and suggestions.
When Googleing "Orico M.2 NGFF Enclosure" all I can find are devices that are M.2 NVME drive enclosures.

In many cases, M.2 NVME (PCi) and M.2 SATA are not compatible. 

The information page on amazon for the above enclosure state the following:

> 
> This NVMe SSD enclosure leverages most of M.2 PCIe NVMe drives to add ultra-fast USB C 3.1 Gen 2 (10 Gbps) external storage to your USB-C enabled host (USB-C cable included)
> 
> 
> Compatible with most M-Key M.2 NVMe PCIe SSD with 2280, 2260, 2242,
>  2230 form factor: Samsung 950 Pro, PM951, PM981, SM961, 960 EVO, 960
>  Pro, 970 EVO, 970 Pro, WD Black, ADATA XPG, Crucial, Intel Optane
>  memory 600P, 760P, 900P, Kingston. **Note: NOT compatible with M.2 SATA
>  NGFF or AHCI based SSDs**.
> 
> 
> 

You would need an enclosure that is compatible with some kind of M.2 SATA compatibility.

Double check the enclosure you have and read the capabilities of the enclosure. I only have the evidence from the google search with the informaiton you have offered.