How can I boot users off after a certain time.

Have a look at the accepted answer in this post. I think it is what you want.

https://www.experts-exchange.com/questions/20380102/force-logoff-for-all-users.html

Why are you not running the built-in SBS Backup?  You wouldn't have this problem if you were using that.  Is there some reason that you are using something else?

Jeff
TechSoEasy

I've had no luck with the built in SBS.  All I want to know how to do is force user log off at a certain time.

Yes, but the Built-in Backup uses Volume Shadow Copy which doesn't require you to force users off... what problems did you have with the built-in backup?  I've got it running on every SBS install I've done (over 50) without any problems.

Jeff
TechSoEasy

Can anyone offer assistance directly related to my question?

Well, okay...

You just need to enable "Force Logoff When Logon Hours Expire" in the Default Domain Policy.  This is actuall set as Disabled by default.

You'll find this at Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Network security: Force logoff when logon hours expire.

Change this to Enabled.

Jeff
TechSoEasy

Is there a way to do this without having to go to each machine and make the change and not use group policies?

Um... your comment makes no sense at all.  This is done on the server and can only be done via GPO  -- it's the DEFAULT DOMAIN POLICY which you'll find under Group Policy Objects.  I'd suggest that you back up your GPO's before making any changes, just in case.  It has nothing to do with the workstation's local policy.

Jeff
TechSoEasy

I'd say that the question was clearly asked and clearly answered.  Therefore, there is no reason to delete.

Jeff
TechSoEasy

You have got to be kidding.  Read your responses to me.  They are sarcastic and condescending at best.  You have answered questions that I've posted before and the responses have also been "conceited".    Perfect examples are: "Well OK...."  "Um.. your comment makes no sense at all"

Here is a suggestion, Well GTKINC, I don't quite understand your question, could you further explain.  or  Well I'm sorry you haven't had any luck with the SBS backup, let me show you what you are doing wrong.  

End state for me is, I'm the customer.  I shouldn't have to pay for and/or tolerate unwarranted contemptuous responses.

GTKINC,

End state for me is that I'm the customer too.  I have absolutely no financial interest, nor am I employed by Experts-Exchange.  I do this because I enjoy helping folks with their tech issues, and it helps me to keep sharp on the ever-changing technology.... volunteering my time and efforts.

I do answer questions in a direct, matter-of-fact manner... but if you review the thousand or so answers I've provided on this site, I think you'll find that I always treat people with respect and hopefully we have a bit of fun along the way.  But more importantly, I try very hard to look beyond the actual question to make sure that I'm not quickly answering something that would ultimately be detrimental to someone's business or IT infrastructure.  

With regards to this particular question, I was really baffled by your comment... and looking back on it now, I still am a bit confused.  Perhaps you made a typo in “Is there a way to do this without having to go to each machine and make the change and not use group policies?” adding an extra "not"?

Could you have meant:

“Is there a way to do this without having to go to each machine and make the change and use group policies?”

At the time I read it, I didn't see it any other way though.

I am sorry if you took offense to the style of my remarks, and I did review the one other question I answered for you in this particular Topic Area... I would agree that it was even more "direct" and certainly not empathetic.  So, while I may have not shown any empathy for your predicament, I am truly sorry that you've had trouble with your server which is why I've taken time out of my valuable day to give you the best information possible.


Jeff
TechSoEasy

Thanks for the apology.  No need to be empathetic just don't sound like a robot.

The "makes no sense at all" I percieved that as me needing to go to the MMC on each individual workstation and make these changes.  has mentioned eariler that I didn't want to have to begin using policies as i wasn't that familiar with them.  Saying that I thought you were trying to tell me how to do it but I had to go to each machine.  

If I can do what i'm wanting to do without using policies that would be great.  If I must use them to accomplish this then so be it.

The Default Domain Policy only exists on your server.  So, you only need to open the Group Policy Management Console on the server to make this happen.  Open the Server Management Console > Advanced Management > Group Policy Management > Forest: yourdomain.local > Domains > YourDomain > Group Policy Objects.  There you will see the Default Domain Policy and you can edit it as I described above.

Jeff
TechSoEasy

Thanks for the assistance.  I will check this out and I'm sure I'll have questions in the future.  Had some bad experiences with GP's using NT4.0 and was hoping to work around them.  With other things I've needed to do I've found ways to work around GP's to get what I want but I do admit that it would've been easier knowing GP's.  Thanks for your time and I apologize for any confusion.  Take care.

Server 2003 is nothing at all like NT4.0.  Your experiences with that OS may have been bad... but, there is NO reason at all to avoid GP's if you want to manage your server and network efficiently.  

Good Luck!

Jeff
TechSoEasy