Here's a handy tip for disabling access to NT 4.0 systems while you perform maintenance or upgrade tasks, or if you suspect your system is being attacked via NetBIOS. Unless you have modified the default settings, the Everyone group has the right "Access this computer from the network." This permission lets users connect whenever a server is available on the network. To disable non-Administrator access, start User Manager for Domains, select User Rights on the Policies menu, select "Access this computer from the network" from the drop-down menu of rights and remove the Everyone group. When you are ready to put the server into production, reverse the procedure and grant this right to the Everyone group. This technique is faster than setting up restricted logon hours for user accounts. Microsoft article Q264809 documents this technique. -- Paula Sharick