Here is various tricks you can use in the Group Policy Editor in Windows. Note a computer must be on a domain for this to work. See here for more information on GPO’s. Please also check out Logon Preferences.
To Deny Local Logins:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Go to “Deny log on locally” and the add the user to do not want to have local access to the server.
To Disable Balloon Notifications on the System Tray:
User Configuration\Administrative Templates\Start Menu and Taskbar
Switch to Enabled. Should be good to go.