Note that the GPO setting for the command prompt can allow scripts to execute (it's a suboption). Also picked up this tidbit somewhere along the way: How to Enable or Disable Client Logons in the Registry Disable logons X86: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon X64: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon Add a REG_SZ value called WinStationsDisabled and set the value to 1. Enable logons Change the WinStationsDisabled value to 0. -------------------------------------------------------------- Eric Layman National City Corporation Common Services - Platform Engineering eric.layman@xxxxxxxxxxxxxxxx Mail Locator 01-5212 Office 216.257.7147 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Raffensberger, Stephen D Sent: Friday, December 05, 2008 4:10 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: MSTSC Lock Users Doug, I've see this too. When someone sets the GPO you can no longer use the command line to disable logins. Strangely, if you're using Citrix the CMC can still disable them on a per server basis. I wish I knew what trick they use. Steve Raffensberger Sovereign Bank 1125 Berkshire Boulevard Wyomissing, PA 19610 email: sraffens@xxxxxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Doug Rooney Sent: Friday, December 05, 2008 11:48 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] MSTSC Lock Users Greetings, As of this morning the script 'Change login /disable' no longer works. Windows Terminal server Win2003. Thank You -Doug Rooney Sonoma Tilemakers IT Systems Administrator 7750 Bell Rd. Windsor Ca, 95492 (707) 837-8177 X11 (707) 837-9472 FAX it@xxxxxxxxxxxxxxxxxxxx<mailto:it@xxxxxxxxxxxxxxxxxxxx> *** This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail, and delete or destroy the message. Thank you. ------------------------------------------------------------------------------------------- ***National City made the following annotations ------------------------------------------------------------------------------------------- This communication is a confidential and proprietary business communication. It is intended solely for the use of the designated recipient(s). If this communication is received in error, please contact the sender and delete this communication. ===========================================================================================