Force Log off and login policy.

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I want to have a policy that would allow all restricted
users login everyday at 9 AM, not before that, and log
them off forcefully at 11 AM. Is this possible? They
shouldnt be able to log in again after 11 AM.
Any help is greatly appriciated.
Thanks a lot.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

You can configure domain user accounts in AD and local accounts with the net user
command to have restricted logon hours as shown in the KB link below.

http://support.microsoft.com/?id=318714

You can configure a security option in the appropriate security policy to force users
to logoff when their account time limit has expired but that will only force a user
off of a server or domain access to resources - not the local machine.

To forcibly log a user off of their local machine you could try an use the AT command
which would not be selective as far as the user and force off any user logged onto
that local machine. You could use the AT command as shown in the link below with the
/interactive switch to enable a command to logoff the user at say 11:01 AM on every
day or whatever schedule you want. Shutdown and logoff are already on the computer I
believe, but if they do not work right in testing use psshutdown -o which is free
from SysInternals. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;313565

at /interactive 11:01 /every:M,T,W,Thu,F logoff

"Nimit Mehta" <chocofilium@yahoo.com> wrote in message
news:240e601c45f07$4088bf50$a401280a@phx.gbl...
> I want to have a policy that would allow all restricted
> users login everyday at 9 AM, not before that, and log
> them off forcefully at 11 AM. Is this possible? They
> shouldnt be able to log in again after 11 AM.
> Any help is greatly appriciated.
> Thanks a lot.

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I should add the logoff method that I suggest with the AT command will be
abrupt and
not give users time to save their work so you may want to use the AT command
to give
a text message with a five minute warning or use the shutdown command with
the -t 300
or so to give a five minute warning before shutting down the computer
[the -t does
not work with -l for logoff. That of course will not help someone at the
water
cooler. --- Steve

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:xoKEc.6633$Oq2.821@attbi_s52...
> You can configure domain user accounts in AD and local accounts with the
net user
> command to have restricted logon hours as shown in the KB link below.
>
> http://support.microsoft.com/?id=318714
>
> You can configure a security option in the appropriate security policy to
force
users
> to logoff when their account time limit has expired but that will only
force a user
> off of a server or domain access to resources - not the local machine.
>
> To forcibly log a user off of their local machine you could try an use the
AT
command
> which would not be selective as far as the user and force off any user
logged onto
> that local machine. You could use the AT command as shown in the link
below with
the
> /interactive switch to enable a command to logoff the user at say 11:01 AM
on every
> day or whatever schedule you want. Shutdown and logoff are already on the
computer
I
> believe, but if they do not work right in testing use psshutdown -o which
is free
> from SysInternals. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;313565
>
> at /interactive 11:01 /every:M,T,W,Thu,F logoff
>
> "Nimit Mehta" <chocofilium@yahoo.com> wrote in message
> news:240e601c45f07$4088bf50$a401280a@phx.gbl...
> > I want to have a policy that would allow all restricted
> > users login everyday at 9 AM, not before that, and log
> > them off forcefully at 11 AM. Is this possible? They
> > shouldnt be able to log in again after 11 AM.
> > Any help is greatly appriciated.
> > Thanks a lot.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

I should add the logoff method that I suggest with the AT command will be
abrupt and
not give users time to save their work so you may want to use the AT command
to give
a text message with a five minute warning or use the shutdown command with
the -t 300
or so to give a five minute warning before shutting down the computer
[the -t does
not work with -l for logoff. That of course will not help someone at the
water
cooler. --- Steve

"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:xoKEc.6633$Oq2.821@attbi_s52...
> You can configure domain user accounts in AD and local accounts with the
net user
> command to have restricted logon hours as shown in the KB link below.
>
> http://support.microsoft.com/?id=318714
>
> You can configure a security option in the appropriate security policy to
force
users
> to logoff when their account time limit has expired but that will only
force a user
> off of a server or domain access to resources - not the local machine.
>
> To forcibly log a user off of their local machine you could try an use the
AT
command
> which would not be selective as far as the user and force off any user
logged onto
> that local machine. You could use the AT command as shown in the link
below with
the
> /interactive switch to enable a command to logoff the user at say 11:01 AM
on every
> day or whatever schedule you want. Shutdown and logoff are already on the
computer
I
> believe, but if they do not work right in testing use psshutdown -o which
is free
> from SysInternals. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;313565
>
> at /interactive 11:01 /every:M,T,W,Thu,F logoff
>
> "Nimit Mehta" <chocofilium@yahoo.com> wrote in message
> news:240e601c45f07$4088bf50$a401280a@phx.gbl...
> > I want to have a policy that would allow all restricted
> > users login everyday at 9 AM, not before that, and log
> > them off forcefully at 11 AM. Is this possible? They
> > shouldnt be able to log in again after 11 AM.
> > Any help is greatly appriciated.
> > Thanks a lot.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Ok, Thanks a lot works fine, but what about force log off?
It doesnt seem to work even with IF command. I tried
psshutdown utility but there is no log off option there.
>-----Original Message-----
>I want to have a policy that would allow all restricted
>users login everyday at 9 AM, not before that, and log
>them off forcefully at 11 AM. Is this possible? They
>shouldnt be able to log in again after 11 AM.
>Any help is greatly appriciated.
>Thanks a lot.
>.
>