question to you #cybersecurity people.

when doing active directory, in AD environment, I want the 1 user who has their computer to be able to login to only his user.
for example, if John doh has his computer, I want John doh to be able to login with only John doh, and not any other user, like Jane doh, or admin, even if he has the correct password.
how can I do this?