I have a Windows 2000 server runing SQL and I need to stop a user from accessig the server. I feel like a newbie asking this question but I really need to keep this one person out. I explored allowing him to only logon to certain servers via his account in AD, but then I would have to list all the servers in the domain except the one I don't want him in. He is not a member of the local admin group either, unless he is getting in on the application level via SQL only!? Any assistance is appreciatted. Thanks.