• For the first problem, a DDL trigger should be what you need.

    For the second problem, look up the syntax for ALTER LOGIN. You'll also need to use that in your DDL trigger.

    John