Getting back to a simple Active Directory solution, you can restrict users to login hours and a list of allowed workstations.
_________________________
Bill