Is there a way to automate an event that will log all users off of a
Windows 2003 terminal server at a specific time? I'm trying to enforce
logon hours, and I need to be able to automatically log users off when
their logon hours expire. I have a script that will log them off of
their individual machines, but not from terminal services.

Thanks,
William

Are you using the logon hours settings in the User account properties
in AD?
Have you tried configuring a GPO with the "Disconnect clients when
logon hours expires" setting, under
Computer configuration - Windows settings - Security settings - Local
Policies - Security options

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
___ please respond in newsgroup, NOT by private email ___

William Albert <(E-Mail Removed)> wrote on 04 jun 2005 in
microsoft.public.win2000.termserv.apps:

> Is there a way to automate an event that will log all users off
> of a Windows 2003 terminal server at a specific time? I'm trying
> to enforce logon hours, and I need to be able to automatically
> log users off when their logon hours expire. I have a script
> that will log them off of their individual machines, but not
> from terminal services.
>
> Thanks,
> William

Vera Noest [MVP] wrote:
> Are you using the logon hours settings in the User account properties
> in AD?
> Have you tried configuring a GPO with the "Disconnect clients when
> logon hours expires" setting, under
> Computer configuration - Windows settings - Security settings - Local
> Policies - Security options
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> http://hem.fyristorg.com/vera/IT
> ___ please respond in newsgroup, NOT by private email ___
>
> William Albert <(E-Mail Removed)> wrote on 04 jun 2005 in
> microsoft.public.win2000.termserv.apps:
>
>
>>Is there a way to automate an event that will log all users off
>>of a Windows 2003 terminal server at a specific time? I'm trying
>>to enforce logon hours, and I need to be able to automatically
>>log users off when their logon hours expire. I have a script
>>that will log them off of their individual machines, but not
>>from terminal services.
>>
>>Thanks,
>>William

I have configured logon hours for the specified users, and I have made
sure that the group policy setting forcing users to log off when logon
hours expire is set, and that the GPO applies to the users in question.

I logged in to the terminal server as a user that with logon hour
restrictions minutes before the restrictions kicked in, and waited to be
logged off. I lost connections to my network drives (as expected), but
it didn't log me off of the terminal server.