Computer Operating Times

Steve Eckerman
Steve Eckerman used Ask the Experts™
on
I am running Windows Server 2008 R2 edition.  My LAN consists of approximately 35 computers.  Some of the employees are accessing computers that are not the computers that they should use.  Is there a way to set them up on the server so that they will only operate during specific time frames?  Please advise.  Thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Imal UpalakshithaIT System Administrator

Commented:
use windows task schedular to shutdown server. Use Bios setup to configure power on schedule
Lee W, MVPTechnology and Business Process Advisor
Most Valuable Expert 2013

Commented:
> use windows task schedular to shutdown server.
While I realize there are some parts of the world without reliable power, this is NOT a solution in my opinion.

You can modify the local group of the computer so that only specific users can login.  By default, Domain Users (which means everyone) can login to a computer.  You can remove Domain Users (DO NOT remove Domain Admins) and then add the specific user(s) you want.

You can also modify group policies to prevent users from logging on locally (I don't like this method).

You can also modify each user's account and set the logon hours.  I believe it's a button in one of the account properties areas of Active Directory.

(I assume you are using Active Directory - if not, you should be with 35 users!)
Steve EckermanSystems Administrator

Author

Commented:
How would I modify the local group on the computer?  Could you please elaborate?  Thanks!
Technology and Business Process Advisor
Most Valuable Expert 2013
Commented:
Computer management.  Local Users and Groups section (Where you'd create a local computer account).  Go to Groups, select Users, and modify.

Do this first on a TEST system so you know that it works and if you make a mistake you don't end up causing yourself problems.  Further, if the users are also in domain admins group for some reason - they REALLY shouldn't be, but poorly built networks sometimes have them in that group - then removing them from Domain Users won't have any effect.  And make sure the Domain Users group wasn't added to the Power Users group or the Local Administrators group.
Steve EckermanSystems Administrator

Author

Commented:
Thanks for the great answer!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial