[IDEA] Security - which user really need to login

[UpsiUps]

I am also not a security expert - as a manager, I know enough to sound dangerous
I understand your pre-requisistion, which is nice - and difficult to setup. In Germany the technical journals make regular attacs by scanning the network on open ports.
So I try to keep all devices to a minimum of software installed and also only required accounts.

So I will change the two accounts to nologin and will see , if this will break anything - which doesn't mean it could not break anybody else system