Disable user accounts in xp (WXP-Pro)

[Daniel Bucciere]

Can I disable the user accounts within the control panel? If so can I also do it only to effect specific login names?<P ID="edit"><FONT class="small">Edited by Daniel Bucciere on 04/10/03 05:24.</FONT></P>

[POBrien]

Hello Mr. Bucciere,

Welcome to the WinGuides Forums!

Yes, it can be done.

Login to the administrator account and right click on My Computer and select Manage...

Create a new group named

user_accts_no

add in the applicable users that should not be allowed access.

Complete a search in the windows\system32 folder for the nusrmgr.cpl file. Right click on the file and select properties and then the security tab. Click the add button and type in the new group name of user_accts_no then click the check names button and then click ok. Next, click on the group to highlight it and then add a checkmark to the read permission in the Deny column. Click on the Administrator account to highlight it and make sure it has Full Control.

POBrien

[schwerv]

I wrote a request similar to this a week ago or so. The difference was that my problem had to do with disabling domain users from loging into an XP workstation.

I tried your resolution and it did not work in a domain environment. Do you by chance have any suggestions for those of us in domain environments?

Thanks

Eric

[POBrien]

Hello Eric,

Create a global group on the server name no_station_access and add in the users or users group who should not be allowed access.

Then have your techs go to each workstation that should be restricted and login as the local Admin and then launch Local Security Policy within Admin tools. Expand User Rights Assignments and then double click on Deny Logon Locally. Browse to the server and add in the global group.


POBrien