Hi Alanitech,
Both modifications were in global.php.
The first modification was to "user_add_dbuser". The second modification was the function "check_login_info"
The only downside to this is that the user cannot retrieve password. The admin will need to reset it with one and then tell the user so they can get back in and change it themselves.
Email me if you want to know more.
nthompson4work@gmail.comBest~