Solved

forcing users to log off at a specific time

Posted on 2011-09-27
10
757 Views
Last Modified: 2012-06-22
Hi

I have been asked to create a GPO that will force users to log off at 3pm.  I'm not sure if this is a one-off requirement or a daily (regular) requirement.  We have a W2K3 domain with approximately 200 computers.  How can I achieve this (easily)?

Rich.
0
Comment
Question by:richardstuartpowell
  • 3
  • 3
  • 2
  • +2
10 Comments
 
LVL 4

Accepted Solution

by:
mustang83 earned 250 total points
ID: 36708415
You can force logoff when the users logon hours expire.

In group policy you can setup a policy which says a user can logon to computer between 9-3. Another setting forces the logoff at 3.

See microsoft document for details on how to do this.

http://technet.microsoft.com/en-us/library/cc787251(WS.10).aspx
0
 
LVL 5

Expert Comment

by:zippybungle2003
ID: 36708526
Make sure you notify users as well with a net send otherwsie you will have upset users ( boo hoo )

http://www.techieshelp.com/notify-users-of-server-shutdown/
0
 
LVL 2

Author Comment

by:richardstuartpowell
ID: 36709234
guys this is not a solution !


I don't want to send a notification to the users  and the link to the ms article is very basic and doesn't show you how to do it anyway!

Please respond with a solution or i will re-post this question!
0
 
LVL 4

Assisted Solution

by:mustang83
mustang83 earned 250 total points
ID: 36709465
My solution was not to warn them it was to going to happen just to kick them out.

Here is a step by step guide.

http://support.microsoft.com/kb/816666

I tend to try and help people help themselves. The above is the parrot version. I presumed (wrongly) that if you have access to do this you would know what to do with it as it is server admin 101.

We are here to help so don't flame us.
0
 
LVL 8

Expert Comment

by:Amitabh Singh
ID: 36710683
Hi
use psshutdown.exe this tool will allow you to Logoff all console user (clients ) via network provide your all client list via file

psshutdown.exe -o @computerstologoff.txt

for more information and download have a look to Microsoft doc below
http://technet.microsoft.com/en-us/sysinternals/bb897541
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 4

Expert Comment

by:mustang83
ID: 36711859
tech_eng : this works well but you still need to define there login hours otherwise they can log straight back on.
0
 
LVL 8

Expert Comment

by:Amitabh Singh
ID: 36714670
yep just create a schedule task on your server and run that task every 3pm !
0
 
LVL 8

Assisted Solution

by:Amitabh Singh
Amitabh Singh earned 125 total points
ID: 36714683
Step by step

1st: download and save psshutdown.exe inside your %systemroot%\System32 Folder
2nd: create a new text file past given code in it and save as "logoff.bat"
3rd : create a new text file and provide list of servers in it , save as computerstologoff.txt,
computerstologoff.txt example
Server1
Server2
Server3

4th: create a new windows schedule task to run logoff.bat file everyday @3:00 PM
0
 
LVL 4

Assisted Solution

by:JustMy2Cents
JustMy2Cents earned 125 total points
ID: 36715985
Rich,

You might want to give a look to a 3rd-party software solution called UserLock.

UserLock will indeed allow you (among other features) define working hours and/or maximum session time for your users and disconnect them with prior warning outside of the defined timeframe(s) and/or when time is up.

@mustang83
There is a setting (Local Policies > Security Options) that might make you think that it would work that way: "Automatically logoff users when logon time expires."
But this setting only applies to file and print servers (SMB component) and there is therefore absolutely nothing in Windows that will really log a user off of his/her workstation where he/she is interactively logged on at the console.

Hope it will help.


0
 
LVL 2

Author Closing Comment

by:richardstuartpowell
ID: 37105697
thanks guys
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now