Group policy server 2003

[Guest]

Ok I know I am in the server 2000 group but don't see one for 2003 and I have
a group policy question. If I am in the wrong place could someone direct me
to the proper place to ask the question. I have some users that just don't
want to listen when I tell them to log off every night. So in group policy
under computer configuration/windows settings/security/ there is an option to
force logoff when log in hours expire. I have this setting enabled on the
default domain policy and also in the default domain controller policy. I set
up a test account to make sure it worked and it does not appear to be
working. Anyone have any ideas? Thanks in advance!

 

[Stanley Jones [MSFT]]

Even though you enabled the policy, have you specified what the max logon
hours will be? The policy depends on this. In AD of Users and Computers,
select the users, right-click, click Properties and from the account tab,
click Logon Hours and modify as necessary. See the link below for more.

http://support.microsoft.com/default.aspx?scid=kb;en-us;318714

 

[Ken B]

I heard something to the effect that the policy doesn't behave as it's named
(or at least as one would expect from the name). I don't think it actually
logs the user session out of Windows, but disconnects their connection to
the server(s) they're connected to. I think it also reconnects when you
come back into 'logon hours'.

Remember that the logon times specified apply only to the user actually
logging in. If the user logs in 1 minute before their appointed login time
ends, they should still be able to use the computer as long as they like.
Unless they log off, then they're SOL (and I don't mean a card game!). At
least that's the way it behaves in Novell.... or did it? It's been so long
since I passed my cna test and haven't used novell since that class.

HTH

Ken