If you are working with Windows Workstations we have a few different options to support you.
Windows 8, 8.1, 10 - beyond / Server 2012 -2019 - beyond we use a Windows Logon agent to secure the machine.
Check out this article for more about that agent.