diff --git a/resources/providers/config.rb b/resources/providers/config.rb
index 906cad3..9da3003 100644
--- a/resources/providers/config.rb
+++ b/resources/providers/config.rb
@@ -17,7 +17,7 @@
     end
 
     execute 'create_user' do
-      command "/usr/sbin/useradd -r #{user}"
+      command "/usr/sbin/useradd -r #{user} -s /sbin/nologin"
       ignore_failure true
       not_if "getent passwd #{user}"
     end