Difference between Computers object policy and User object Group ploicy

Hi All,

Here i have some confusion in between computer object and user object in AD (Not user and Computer configuration in GPO)?

we added computers in a separate OU.

Policy: Disable users login on some computers and  only authorized user have to login on these machines.

1.If i apply disable login GPO on some computers on Computers Object OU in AD and grant login access for some users:

a) IF i apply this GPO on ComputersOU: How it will validate granted login access users and how they login on this machines.

Is this the right GPO, please suggest me.

Thanks Kalyan