Thank you Andy for the post, very nicely put, but for me it was like "wow I don't know anything about sql".

I can't figure it out how to revoke and deny the connect permission to the login?

All I know the basic step, go to that login, properties, status, there you can select "deny" for the permission to connect... - So if I consider this as "Connect permission has been denied" then what is actually a "Connect permission has been revoked"? and how to do that?

I have witnessed this - After selecting "deny" of that login in the status tab "and" disabling the login, then only I was able to see the red arrow for that user under the Server\Security\Login... but that User in the specific database (Server\Database\Security\User) there was no changes in the icon.

From the Transcript - Van Dyke's second response as he mentions "...some of the user accounts" - I understand that we are suppose to look under this "Server\Database\Security\User" and not "Server\Security\Login"?