|
Posted by Al Dunbar on April 11, 2008, 1:47 pm
Please log in for more thread options
IMHO, the attribute in active directory that specifies the hours during
which an account may or may not logon, is only that. If you can only logon
from 8am to 4pm, you can logon at 3:59pm and stay logged on for as long as
you want. AD will not force a logoff automatically, however, you might be
able to develop a scheduled task that would identify those accounts logged
on outside of their allowed times, and forcefully log them off. I'm not
sure, though, if the aggravation caused would be worth the apparent benefit.
/Al
> I'm specifically looking to disable logon for terminal services between
> certain times, but would like to limit access for desktop users as well if
> possible.
> Something similar to the time limits in terminal services (ie, active,
> disconnected and idle session limits) and the ability to log off the user
> if the limit is reached. In this case the user would be logged off if the
> hour is reached (ie 11pm to 4 am).
>
| 
XML Sitemap