How To Forcibly Logoff Users?

[Billy]

I would like to begin enforcing logon hours for some of my
users. I have an NT 4.0 Domain with Windows 2000 Terminal
Servers. I would like to restrict my users from logging
on to these servers during certain times of the day, and
force them off when their logon time expires.

What I've done so far is I have defined the logon hours
for a test user; on my domain controllers, I have set the
account policy to "Forcibly disconnect remote users from
server..."; and on the Terminal Servers, under Security
Options, I have enabled the "Automatically log off users
when logon time expires" option.

My problem is that when my test user is logged on to a
Terminal Server when the logon time expires, it is not
forcing him to logoff. It will not allow him to make any
new connections however, but I need him to be forced off
as well. Am I missing a step in configuring this, or am I
doing something wrong? Any suggestions would be greatly
appreciated. Thanks.

Billy

 

[Miha Pihler]

Hi Justice,

run following command on your TS Server...

NET ACCOUNTS /FORCELOGOFF:5

(where 5 defines 5 minutes after logon hours expire) ...

http://www.microsoft.com/technet/tr...rodtechnol/winxppro/proddocs/net_accounts.asp

 

[Billy]

Will this logoff everyone that's connected? Or can I
restrict it to just certain users?

 

[Miha Pihler]

Page that I included in my post
(http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtech
nol/winxppro/proddocs/net_accounts.asp) says this about net account
/forcelogoff option

"Sets the number of minutes to wait before ending a user's session with a
server when the user account or valid logon time expires. The default value,
no, prevents users from being forced to log off."

This means that it will only logoff the users that don't have permissions
any more (time restrictions)...

Mike

 

[Billy]

I just tested it, and this still did not kick me off.
Anything else I should try?