Failure Audit 530 with Force Logoff in GP

I have an account logon time restriction violation in my security event log. I have in place a group policy that will log the user off if they are logged in within the time resriction. The event ID is 530 under security as the source. I have read that if the user is logged into outlook when they are forced log off then this may cause the event in the security log. It happens multiple time a minute per user that has the failure audit. Im not sure if that is what's causing my failure audits, but let me know what you all think.
compguy101101Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

stronglineCommented:
yes that is correct. 530 will be generated only when time restriction is violated.
0
compguy101101Author Commented:
Well I am still trying to figure out what to change so that I don't receive the 530 error. If you have an idea on that it would be helpful. I want to force the log off of the user which I already have set. But it does not seem to work or either because they are in Outlook they are forced to logg off so it see's them as logged in.
0
stronglineCommented:
then you have to disable the account logon auditing completely, which is probably not what you want.

account logon auditing setting can be changed in Default Domain *Controller* Policy.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
compguy101101Author Commented:
Yes that is not what I want to do. I want to make it to where when the user is forced to log off then Everything is closed, their profile is logged off completely and I don't receive the 530 error.
0
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.