Click here to get back home

How to force User log off when time expires?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
How to force User log off when time expires? shocker 07-20-2007
Posted by shocker on July 20, 2007, 5:48 am
Please log in for more thread options
I want to force a user to log off when his logon hours expire.
In the Network Security category (under Group Policy), I enabled the Force
Logoff When Logon Hours Expire policy, but users are never logged off.

I running Windows Server 2003 as a standalone (no domain or AD). the server
is just a rubust workstation, but allow remote users to log in simultaneously.

Is it possible to log users off in this case?

Posted by Rob (Microsoft) on July 20, 2007, 2:02 pm
Please log in for more thread options
Not without being able to specify logon hours in the account. I believe that
feature is only in the domain profile.

"shocker" wrote:

> I want to force a user to log off when his logon hours expire.
> In the Network Security category (under Group Policy), I enabled the Force
> Logoff When Logon Hours Expire policy, but users are never logged off.
>
> I running Windows Server 2003 as a standalone (no domain or AD). the server
> is just a rubust workstation, but allow remote users to log in simultaneously.
>
> Is it possible to log users off in this case?

Posted by shocker on July 20, 2007, 9:32 pm
Please log in for more thread options
So, specifyig logon hours with net user /time is not applicable?

The user is now restricted from logging on based on the times set in net
user, but they are never logged off if they account is already logged on when
the time expires.

"Rob (Microsoft)" wrote:

> Not without being able to specify logon hours in the account. I believe that
> feature is only in the domain profile.
>
> "shocker" wrote:
>
> > I want to force a user to log off when his logon hours expire.
> > In the Network Security category (under Group Policy), I enabled the Force
> > Logoff When Logon Hours Expire policy, but users are never logged off.
> >
> > I running Windows Server 2003 as a standalone (no domain or AD). the server
> > is just a rubust workstation, but allow remote users to log in
simultaneously.
> >
> > Is it possible to log users off in this case?

Posted by Roger Abell [MVP] on July 21, 2007, 1:56 am
Please log in for more thread options
> So, specifyig logon hours with net user /time is not applicable?
>
net user /time
controls when an account can log on, it does not kick logged on
account out

> The user is now restricted from logging on based on the times set in net
> user, but they are never logged off if they account is already logged on
> when
> the time expires.
>
The time set in the network security policy you mentioned only
controls network access and will close off sessions to network
shares based on the logoff time; it has nothing to do with local
login sessions.


> "Rob (Microsoft)" wrote:
>
>> Not without being able to specify logon hours in the account. I believe
>> that
>> feature is only in the domain profile.
>>
>> "shocker" wrote:
>>
>> > I want to force a user to log off when his logon hours expire.
>> > In the Network Security category (under Group Policy), I enabled the
>> > Force
>> > Logoff When Logon Hours Expire policy, but users are never logged off.
>> >
>> > I running Windows Server 2003 as a standalone (no domain or AD). the
>> > server
>> > is just a rubust workstation, but allow remote users to log in
>> > simultaneously.
>> >
>> > Is it possible to log users off in this case?



Posted by shocker on July 21, 2007, 4:22 am
Please log in for more thread options
Can this accomplish with scripting? I not very familiar with Windows
scripting, but I'm just curious to know if what I want to do is possible on a
local machine.

"Roger Abell [MVP]" wrote:

> > So, specifyig logon hours with net user /time is not applicable?
> >
> net user /time
> controls when an account can log on, it does not kick logged on
> account out
>
> > The user is now restricted from logging on based on the times set in net
> > user, but they are never logged off if they account is already logged on
> > when
> > the time expires.
> >
> The time set in the network security policy you mentioned only
> controls network access and will close off sessions to network
> shares based on the logoff time; it has nothing to do with local
> login sessions.
>
>
> > "Rob (Microsoft)" wrote:
> >
> >> Not without being able to specify logon hours in the account. I believe
> >> that
> >> feature is only in the domain profile.
> >>
> >> "shocker" wrote:
> >>
> >> > I want to force a user to log off when his logon hours expire.
> >> > In the Network Security category (under Group Policy), I enabled the
> >> > Force
> >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> >> >
> >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> >> > server
> >> > is just a rubust workstation, but allow remote users to log in
> >> > simultaneously.
> >> >
> >> > Is it possible to log users off in this case?
>
>
>

Similar ThreadsPosted
User notification before certificate expires May 30, 2006, 4:19 pm
user logon time tracking November 3, 2006, 1:08 am
HELP Needed: Win2k3 - How to restrict Internet access after log on expires. June 23, 2006, 10:24 am
Built-in Administrator acct. for Domain be password never expires? October 2, 2006, 3:01 pm
Force Lockout Session October 21, 2007, 10:11 am
gpupdate /force killed my DC October 31, 2007, 7:03 pm
"Force shutdown from a remote system" October 13, 2006, 3:26 pm
Force desktop icons using Group Policy? December 22, 2005, 12:56 pm
Automatically force propagation of NTFS permissions...? November 24, 2006, 2:55 am
blocking brute force login attempts November 26, 2007, 2:09 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap