Question : How do you disconnect a user from the domain while they are logged on  (500 points)

We have an employee that is being terminated today and I need to shut them out of the domain while they are logged in.  How can I do this?  It's Windows 2003 SP1 DC.

Thanks

Answer : How do you disconnect a user from the domain while they are logged on  (500 points)

After you disable the account in AD the user still has access until he either:

A. Logs Off
B. Computer is shutdown

So your are stuck with either remotely logging them off or shutting down the PC, when they attempt to log back in they will not be able to.

There are several utilities to remotely logoff/shutdown PC's, the resource kit had a program called logoff.exe and logoff.vbs that could be used

here is a sample program that logs of PC's rmeotely, there are many others...:
http://www.emco.is/remoteshutdownpro/features.html

or you could simply use the shutdown.exe from the command prompt, I usually do this one:

shutdown -r -f -t 1 -m \\computername

that forces a reboot, closes programs without saving, and only gives 1 second before the shutdown is initiated =)