How to: Auto Logoff when logon hours expire

[chicagotech]

Q: I want my SBS2003 server to be able to automatically logoff any users that are still logged on when their allowable logon hours are reached. In other words, if I have set permissions for a user to be logged on from 10:00am until 7:00pm and they are still logged on after 7:00pm, I want the server to automatically log them off so they no longer have resources to the server or Internet.

I have done numerous searches on the topic and can not get a straight answer with instructions on how to accomplish this. I need help from one of you professionals out there!!
Regards..

A1: Assuming you have setup logon hours, you can use group policy to force the user logoff when logon time expires. To do that, open domain group policy, locate Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

There are two options:

"Automatically log off users when logon time expires"

is for all machines in the domain for a GPO.

"Automatically log off users when logon time expires (local)"

is for a local security policy of a machine.

A2: Assuming you want to stop all clients' access sessions and setup login time, you can create a batch including these command lines.

NET STOP SERVER
NET START SERVER
NET START "COMPUTER BROWSER"
NET START "DISTRIBUTED FILE SYSTEM"
NET START "NET LOGON"

Schedule to run the batch at 7 PM.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com