[Last Call] Learn how to a build a cloud-first strategyRegister Now


Windows XP - Limit access to computer to certain hours - GPO?

Posted on 2011-10-24
Medium Priority
Last Modified: 2012-08-13
Need to lock down a Windows XP computer so that only 2 users and the administrator are able to log into the computer between certain hours. This is a domain machine and on an SBS 2008 network.

What is the cleanest way to do this?
Question by:mvalpreda
  • 3
  • 2

Author Comment

ID: 37020636
I don't want time restrictions for the users, I want time restrictions for a SINGLE computer for everyone but 2 users and the domain admin.

Expert Comment

ID: 37020788
This link covers about every possible way to limit hours:

The section on using a GPO looks like the best candidate.  
You could also probably use the net user command locally on the computer as well.  You'd just have to run it for each user on the machine:
net user john /time:M-F,8am-5pm
net user jane /time:M-F,8am-5pm

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.


Author Comment

ID: 37020930
I did see that 816666 article. It just appeared to me that you still have to set it at the user level. That forcibly logs off a user when the hours defined in AD are reached. I want to do this at a computer level and still have users be able to log into their own computers outside of these hours. Therefore I cannot set the time in ADUC.

Author Comment

ID: 37021025
I might need to look at this a different way. Near as I can tell there is no real (easy) way to do this. So I think another solution may be to limit who can log into that machine.
LVL 24

Accepted Solution

Sandeshdubey earned 2000 total points
ID: 37023059
In this case what you can do is that first you need to block other user to login to this PC and only this two user can login,for this open administrative tool and in  Security Settings, Local Policies, User Rights Assignment,Allow Logon locally" add the users which you want to login along with administrator id if required and remove the other users and group.So now only the specified user can login to this PC.

Now you want to set that during x to y time frame any user who login to this PC should logoff.You can create batch file or script and add to schedule task on the computer to achive the same.As of now I dont have the script but you can google it.

I will be coming back after three days as I am going on vacation due to diwali festivals.

Other expert can also assist on the same.


Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Let's recap what we learned from yesterday's Skyport Systems webinar.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

834 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question