How to Immediately Disable and Log off a Domain User (152665)


The information in this article applies to:

  • Microsoft Windows NT Server 3.5
  • Microsoft Windows NT Server 3.51
This article was previously published under Q152665

SUMMARY

Windows NT provides the ability to prevent a user from logging on to the domain by disabling the user account in User Manager; however, this does not take effect until the user restarts the computer. In some cases, it may be necessary to immediately disable a user account in a Windows NT domain.

MORE INFORMATION

In order to immediately disable a domain user account, perform the following steps on the primary domain controller (PDC):

Note: You must have domain administrative privileges in order to perform the following steps:
  1. In User Manager for Domains choose "Account Disabled" in Users Properties.
  2. Still in the Users Properties, choose "Hours" and then Disallow all hours for this user.
  3. Open Server Manager and disable the user sessions in server manager or type "net session \\computername /delete" at the command prompt.
Modification Type:MajorLast Reviewed:11/4/2003
Keywords:KB152665
©2003 Microsoft Corporation. All rights reserved.