I’ve had a few people ask me in the past few days how to disable external accounts as part of their workflow for summer deployments. While I think that external accounts are a great add to the admins toolkit I understand that it doesn’t fall into everyone’s logic that they have for their environment. To disable them:
defaults write /Library/Preferences/com.apple.loginwindow EnableExternalAccounts -bool false