Scripting Question

what is the best way of preventing a user logging in

03/04/2020 279 views

We have a number of Win 7 devices that we have disabled from AD but are still being used I suspect via cached profile or local account. The KACE agent is running and checking in to the appliance so was wondering what options I have to prevent them being used

I was thinking of maybe disabling a service, applying a BIOS password (assume this can only be done if its a Dell) or something of that nature.

Worse comes to worse happy to just delete the system32 directory if needed but as I say, just wanted to see what options I have or what peoples thoughts are

I am pretty new to KACE so if you can give me a pointer on how I would do what ever you suggest I would appreciate it

0 Comments   [ + ] Show comments


Community Chosen Answer


You could use Group Policy to disable the interactive logon - presume these are joined in a domain.

Answered 03/05/2020 by: rileyz
Red Belt

  • The issue is that I suspect these are being used away from the domain ie logging on with either a local or cached account

All Answers


You could create a KACE script that forces a shutdown, assign it to Windows 7 systems and run it every hour. If you're feeling generous, you could give the user a 5 minute warning to save files.

Answered 03/31/2020 by: PaulGibson
Orange Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ