Here is various tricks you can use in the Group Policy Editor in Windows. Note a computer must be on a domain for this to work. Also see "Logon Preferences " for login options. See "http://technet.microsoft.com/en-us/library/bb742376.aspx" for more information on GPO.
To Deny Local Logins: Edit
1. Navigate to: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
2. Go to “Deny log on locally” and the add the user to do not want to have local access to the server.
Disable Balloon Notifications From System TrayEdit
1. Run - gpedit.msc - User Configuration\Administrative Templates\Start Menu and Taskbar
2. Switch to Enabled. Should be good to go.