Force Log off and login policy.

[Nimit Mehta]

I want to have a policy that would allow all restricted
users login everyday at 9 AM, not before that, and log
them off forcefully at 11 AM. Is this possible? They
shouldnt be able to log in again after 11 AM.
Any help is greatly appriciated.
Thanks a lot.

 

[Steven L Umbach]

You can configure domain user accounts in AD and local accounts with the net user
command to have restricted logon hours as shown in the KB link below.

http://support.microsoft.com/?id=318714

You can configure a security option in the appropriate security policy to force users
to logoff when their account time limit has expired but that will only force a user
off of a server or domain access to resources - not the local machine.

To forcibly log a user off of their local machine you could try an use the AT command
which would not be selective as far as the user and force off any user logged onto
that local machine. You could use the AT command as shown in the link below with the
/interactive switch to enable a command to logoff the user at say 11:01 AM on every
day or whatever schedule you want. Shutdown and logoff are already on the computer I
believe, but if they do not work right in testing use psshutdown -o which is free
from SysInternals. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;313565

at /interactive 11:01 /every:M,T,W,Thu,F logoff

 

[Steven L Umbach]

I should add the logoff method that I suggest with the AT command will be
abrupt and
not give users time to save their work so you may want to use the AT command
to give
a text message with a five minute warning or use the shutdown command with
the -t 300
or so to give a five minute warning before shutting down the computer
[the -t does
not work with -l for logoff. That of course will not help someone at the
water
cooler. --- Steve

You can configure domain user accounts in AD and local accounts with the net user
command to have restricted logon hours as shown in the KB link below.

http://support.microsoft.com/?id=318714

You can configure a security option in the appropriate security policy to force
users
to logoff when their account time limit has expired but that will only force a user
off of a server or domain access to resources - not the local machine.

To forcibly log a user off of their local machine you could try an use the AT
command
which would not be selective as far as the user and force off any user logged onto
that local machine. You could use the AT command as shown in the link

below with
the

 

[Steven L Umbach]

I should add the logoff method that I suggest with the AT command will be
abrupt and
not give users time to save their work so you may want to use the AT command
to give
a text message with a five minute warning or use the shutdown command with
the -t 300
or so to give a five minute warning before shutting down the computer
[the -t does
not work with -l for logoff. That of course will not help someone at the
water
cooler. --- Steve

You can configure domain user accounts in AD and local accounts with the net user
command to have restricted logon hours as shown in the KB link below.

http://support.microsoft.com/?id=318714

You can configure a security option in the appropriate security policy to force
users
to logoff when their account time limit has expired but that will only force a user
off of a server or domain access to resources - not the local machine.

To forcibly log a user off of their local machine you could try an use the AT
command
which would not be selective as far as the user and force off any user logged onto
that local machine. You could use the AT command as shown in the link

below with
the

 

[Nimit Mehta]

Ok, Thanks a lot works fine, but what about force log off?
It doesnt seem to work even with IF command. I tried
psshutdown utility but there is no log off option there.