Windows XP - Limit access to computer to certain hours - GPO?

Need to lock down a Windows XP computer so that only 2 users and the administrator are able to log into the computer between certain hours. This is a domain machine and on an SBS 2008 network.

What is the cleanest way to do this?
LVL 2
mvalpredaAsked:
Who is Participating?
 
SandeshdubeySenior Server EngineerCommented:
In this case what you can do is that first you need to block other user to login to this PC and only this two user can login,for this open administrative tool and in  Security Settings, Local Policies, User Rights Assignment,Allow Logon locally" add the users which you want to login along with administrator id if required and remove the other users and group.So now only the specified user can login to this PC.

Now you want to set that during x to y time frame any user who login to this PC should logoff.You can create batch file or script and add to schedule task on the computer to achive the same.As of now I dont have the script but you can google it.

I will be coming back after three days as I am going on vacation due to diwali festivals.

Other expert can also assist on the same.

Thanks
0
 
mvalpredaAuthor Commented:
I don't want time restrictions for the users, I want time restrictions for a SINGLE computer for everyone but 2 users and the domain admin.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
pncorpCommented:
This link covers about every possible way to limit hours:
http://support.microsoft.com/kb/816666

The section on using a GPO looks like the best candidate.  
You could also probably use the net user command locally on the computer as well.  You'd just have to run it for each user on the machine:
example:
net user john /time:M-F,8am-5pm
net user jane /time:M-F,8am-5pm

0
 
mvalpredaAuthor Commented:
I did see that 816666 article. It just appeared to me that you still have to set it at the user level. That forcibly logs off a user when the hours defined in AD are reached. I want to do this at a computer level and still have users be able to log into their own computers outside of these hours. Therefore I cannot set the time in ADUC.
0
 
mvalpredaAuthor Commented:
I might need to look at this a different way. Near as I can tell there is no real (easy) way to do this. So I think another solution may be to limit who can log into that machine.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.