ALTER LOGIN [AnySQLUser] DISABLE ;

ALTER LOGIN [yourdomain\your_windowsgroup_EXEPT_SQL_ADMINS] DISABLE ;

     Jul 13  

Sometimes this is me

Select 'ALTER LOGIN ['+ name + '] DISABLE ; '

from sys.server_principals
/* exclude disabled accounts, sysadmins and ##-accounts */
where is_disabled = 0
and IS_SRVROLEMEMBER('sysadmin', name) = 0
and name not like '##%'

order by name ;

/* only re-enable the ones you disabled !! */
Select 'ALTER LOGIN ['+ name + '] ENABLE ; '

from sys.server_principals
/* exclude disabled accounts, sysadmins and ##-accounts */
where is_disabled = 0
and IS_SRVROLEMEMBER('sysadmin', name) = 0
and name not like '##%'

order by name ;

     Jul 13  

Sometimes this is me