pam.workstation.denied.mesg
This configuration parameter specifies the message displayed if a user attempting to log on is denied access because of a workstation restriction.
For example:
pam.workstation.denied.mesg: \ Your account is configured to prevent you from using this computer. Please try another computer.