Disable-​Local​User

Disables a local user account.

Syntax

Disable-LocalUser
       [-InputObject] <LocalUser[]>
       [-Confirm]
       [-WhatIf]
       [<CommonParameters>]
Disable-LocalUser
       [-Name] <String[]>
       [-Confirm]
       [-WhatIf]
       [<CommonParameters>]
Disable-LocalUser
       [-SID] <SecurityIdentifier[]>
       [-Confirm]
       [-WhatIf]
       [<CommonParameters>]

Description

The Disable-LocalUser cmdlet disables local user accounts. When a user account is disabled, the user cannot log on. When a user account is enabled, the user can log on.

Examples

Example 1: Disable an account by specifying a name

PS C:\> Disable-LocalUser -Name "Admin02"

This command disables the user account named Admin02.

Example 2: Disable an account by using the pipeline

PS C:\> Get-LocalUser Guest | Disable-LocalUser

This command gets the built-in Guest account by using Get-LocalUser, and then passes it to the current cmdlet by using the pipeline operator. That cmdlet disables that account.

Required Parameters

-InputObject

Specifies an array of user accounts that this cmdlet disables. To obtain a user account, use the Get-LocalUser cmdlet.

Type:LocalUser[]
Position:0
Default value:None
Accept pipeline input:True (ByPropertyName, ByValue)
Accept wildcard characters:False
-Name

Specifies an array of names of the user accounts that this cmdlet disables.

Type:String[]
Position:0
Default value:None
Accept pipeline input:True (ByPropertyName, ByValue)
Accept wildcard characters:False
-SID

Specifies an array of user accounts that this cmdlet disables.

Type:SecurityIdentifier[]
Position:0
Default value:None
Accept pipeline input:True (ByPropertyName, ByValue)
Accept wildcard characters:False

Optional Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False
-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

System.Management.Automation.SecurityAccountsManager.LocalUser, System.String, System.Security.Principal.SecurityIdentifier

You can pipe a local user, a string, or a SID to this cmdlet.

Outputs

None

This cmdlet does not generate any output.

Notes

  • The PrincipalSource property is a property on LocalUser, LocalGroup, and LocalPrincipal objects that describes the source of the object. The possible sources are as follows:

  • Local

  • Active Directory
  • Azure Active Directory group
  • Microsoft Account

PrincipalSource is supported only by Windows 10, Windows Server 2016, and later versions of the Windows operating system. For earlier versions, the property is blank.