asked on

How to I force domain users accounts to log off at a certain time, but not lock their abaility to re log into the system?

I need to find a way to log users off through a batch or something that i can put in a policy to force log off after a certain inactivity time period, but still allow them to log back on to the domain. The built in GP only allows configuration for log on/Log off hours. Any ideas?

D0MN01

We use this and it works pretty well...

http://windowsxp.mvps.org/winexit.htm

wunderlich

ASKER

This doesn't seem to work when Group Policy is already set to lock the PC after 30 minutes of inactivity. Correct me if i am wrong, but doesn't this have to be installed on every single machine? I would like to have something that would automatically do it for the whole domain.

ASKER CERTIFIED SOLUTION

D0MN01

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sk_raja_raja

First of all how many users you have ?

simple method will be go to AD and right click the user,click account and click logonhours..here you can specify the days and time this specific user can login to the domain..

wunderlich

ASKER

D0MN01:

Thanks I am working on it right now. Will tell you how it goes.

sk_raja_raja: I can't set log on/off hours because most people in my organization work around the clock.

sk_raja_raja

No, actuall you can use group policy to Force logoff ,but some you will not be able to login back.
Probably if you have a chance try to test forcelogoff and log on hours on the same group policy for a user and see what happens.... ref the link below
http://forums.microsoft.com/WindowsToolsandUtilities/ShowPost.aspx?PostID=2736035&SiteID=69