6.2.7.6 EXCLUDEALL user|host|group|host_group|internet|internet_group|
project who
or
EXCLUDEALL noproject

The EXCLUDEALL line prevents usage of all products by a particular user, host, group, host_group, IP address, or project. If you specify group, host_group, or internet_group, it must be defined by a GROUP or HOST_GROUP or INTERNET_GROUP line in the options file.

Alternately, with noproject specified, all checkout requests from users who do not have the RLM_PROJECT environment variable set will be rejected.

Portions of the INTERNET address can be specified with a '*' which matches any address, e.g. 172.16.7.*

In all cases, the status returned to the user will be RLM_EL_ON_EXC_ALL - “User/Host on excludeall list”.