Thanks dmex. I'll try this when I get home.
Regarding the Local Security Policy - yes I think I did have to change something to allow non-interactive logins without passwords. This was so I could install and use the Direct User Switching Task (
Direct User Switching Task) since I can't find anything else similar to XP's Super Fast User Switching. I think I was guided to enable logons without passwords in order to be able to reliably switch between my and my wife's sessions. The DUST tool is invaluable - it takes literally 1 second to switch between users (using Win+Q like the SFUS used to), so removing it isn't an option. If anyone has a suggestion for getting a more native Super Fast User Switching working on Vista, please let me know.
I'm concerned that DUST probably uses Terminal Services to perform its switching, so denying login via TS for my non-password users may defeat DUST. Let's hope that isn't the case.
-Paul