Force Users to input their time

Posted on 2007-10-02
Last Modified: 2010-04-18
I working for a small company of 60 employess. We have a Windows 2003 AD enviroment and a mix of XP and 2000 Pro clients. We use a time and attendance program called ShopVue which is made by Casco. I member of our senior management team posed the following question to me. "Once a user logs into windows would it be possible to  block access to any network resources if they haven't inputted their time for the previous day??" The SHopvue application does authenicate users using their windows login information. I've already check with Casco and they said this is something that they do not handle.
Question by:compdigit44
    LVL 30

    Expert Comment

    AD isn't going to do this natively - its job is to process authentication, not to enforce business rules.
    LVL 19

    Author Comment

    But there a script of something that could quire the Casco database to see if the user inputted thier time in for the previous day?
    LVL 30

    Accepted Solution

    You have the option to assign a login script to each user, either in the properties of the user's account or using a Group Policy Object that's been linked to a site, domain or Organizational Unit.  The actual commands in that script would be dependent on the application itself, you would need to determine the interface internally or in cooperation with the vendor's technical support.  

    Once that's done you could incorporate something like qlogoff.exe from to log off the user if whatever database query you've written returns a failure.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now