Executive Summary:

Give an account read access to the Security event log by composing the appropriate Security Descriptor Definition Language value in the log's registry subkey.
You can restrict user logon to a specific computer by using the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in.
A Trusted Platform Module (TPM) not only stores encryption keys but also uses Platform Configuration Registers (PCRs) to validate an operating system.
