Hello,
Please clarify, if the VMs are on the same IP subnet, if user accounts are AD domain accounts and if users' credentials are different.
If credentials are different and accounts are local, then why do you think a user can access another user's machine?
Best regards,
Alen
MCSE 2012, MCITP 2008 and MCSE 2003, Cisco CCNA