This read-write flag turns the ability to manage the device through telnet server connections on or off, with manage-on(1) permitting administrative access via telnet sessions. Admins set it to manage-off(0) to lock down device management to more secure access methods, disabling telnet-based administration entirely. For example, an admin hardening a terminal server would set usrTermProtAllowManageUsers to manage-off(0) to force administrators to use a more secure protocol instead of telnet.