Active Directory Domain Services 2008 : Manage Active Directory Domain Services Data - Disable a User Object

7/2/2011 11:37:59 AM

Disable an AD DS user account by using the Windows interface or by using the command line.

To disable a user object by using the Windows interface, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
3.	In the details pane, right-click the user object you want to disable and click Disable Account.
4.	Verify the status message that indicates the account was disabled, as shown in Figure 1. Figure 1. Disabling a user object using the Windows interface.

To disable a user object by using the command line, perform the following steps:

1.	Log on to a domain controller.
2.	Click Start, and click Command Prompt.
3.	In the Command Prompt window, type the following command and press Enter: Dsmod user "CN=Jonathan Smith,OU=New York,DC=WS08DOMAIN01,DC=local" -disabled yes (where "CN=Jonathan Smith,OU=New York,DC=WS08DOMAIN01,DC=local" is the distinguished name of the user that you want to disable).
4.	Verify that the results of the dsmod user command entered above returns dsmod succeeded, as shown in Figure 2. Figure 2. Disabling a user object using the command line.

Tip

Other -----------------