Close site so people can't add themselves as users

How can I make the site semi-closed, so users can't add themselves, but need my permission?

As a site administrator, or another user with the Manager role:

1. Navigate to the Security configuration page in your Plone site's Site Setup panel:
   

   /[your-site]/@@security-controlpanel

2. De-select the check box next to Enable self-registration.
3. Click Save.

This will ensure that only users with the Manager role can add new users.

This will also remove the 'Join' links everywhere automatically. You can still manually browse to '/join_form' (@@register in Plone 4) to get the registration form, but you won't be able to submit the form successfully, so this isn't a security issue. If this worries you, customize the '/join_form' form so that it just presents a policy notice.

To add new users to the site after closing registration as an user with the Manager role (Manage users in Plone 4):

1. Navigate to the Users and Groups page in your Plone site's Site Setup panel:
   

   /[your-site]/prefs_users_overview

2. Click Add new user, and register the new user account.