pam.workstation.denied.mesg

This configuration parameter specifies the message displayed if a user attempting to log on is denied access because of a workstation restriction.

For example:

pam.workstation.denied.mesg: \
Your account is configured to prevent you from using this computer. Please try another computer.