I know that you can place a file, either nologin, or nologon in a specific file system, and if that file is present, only logon from the console is allowed. I can not remember if it is nologin or nologon, and I can't remember where to put the file. I have done this before, and it works great...