PowerShell限制自建域管理员账号只能登录到服务器操作系统

PowerShell限制域管理员账号只能登录到服务器操作系统，内置Administrator无效。

Import-Module ActiveDirectory
$ADusername = 'domainadmin'
$complist = Get-ADComputer -Filter 'operatingsystem -like "*server*"' | Select-Object -Expand Name
$comparray = $complist -join ","
$Wks = (Get-ADUser $ADusername -Properties LogonWorkstations).LogonWorkstations
$Wks += ",$comparray"
Set-ADUser -Identity $ADusername -LogonWorkstations $Wks