Except he provided a script to use wmngmts to command a remote machine to do this, rather than you having to already be on the machine. But if you read his script, this is precisely what he did.

If you control startup scripts, however, this is also super easy to do on a 'local' machine through a login script. You set the same registry key to the same value (run a .reg, use a .vbs, even use a .cmd or .bat, doesn't really matter).

My question is: How do you specify the "allow log-ins by these users" list? If that list is empty, what's the default behavior? If I find answers, I'll stop by and post again.