logon hours question

[Guest]

where is the group policy setting for setting the logon hours?
I want to impliment this accross the board instead of setting this in each
user's profile.

Thanks in advance
Greg

 

[Paul Williams [MVP]]

If memory serves (it's been ages), you configure the logon hours on a
per-user basis, and use GPO to enforce logoff when the hours expire. The
option is a security setting (computer policy).

If you have many user objects to effect, look at an ADSI script.

 

[Brandon McCombs]

where is the group policy setting for setting the logon hours?
I want to impliment this accross the board instead of setting this in each
user's profile.

Thanks in advance
Greg

As Paul said, you have to do it on a per-user basis (it can be scripted
though) however when I imported 500+ accounts into ADS I was able to set
teh logon hours value at the same time the accounts were created by
specifying the appropriate value for that particular attribute. I'm at
home and can't look at what I did at work but just set someone's logon
hours to what you want the setting to be and then use csvde to do a
directory export of that OU. Then open the resulting csv file in Excel
and find the user that you edited. Scroll over to the column labeled
"logonHours" (I think) and the value that is there is what you will need
for what I'm about to tell you.

The value will look something like the following: X0000f0f0f0f00f0fff

MS uses hex values to represent the hours of the day.

Anyway, to do this for all users at once just create a VB script that
will connect to ADS, search for all users, and enumerate through each of
them and set the logonHours attribute (or whatevr the proper name is)
with the value from the csv file.


let me know if that helps