OK...I managed to lockout everyone in the entire domain by doing the following: I added the 'Domain Users' group to the 'Log on locally'...
Separate names with a comma.