Solved

Can I effectively disable a computer based on date/time?

Posted on 2014-02-07
5
326 Views
Last Modified: 2014-02-10
In our company, the IT team manages a pool of "loaner" laptops.  People tend to hang onto these computers forever once they've got their hands on them.  These are domain computers.  What are some options for rendering a computer unusable or "mostly useless" on a certain date, or after a specified time period (14 days or whatever)?  I'm looking for a solution using Windows, but would be happy to hear of applications that do something like this.
0
Comment
Question by:StrataDecisionIT
  • 2
  • 2
5 Comments
 
LVL 36

Expert Comment

by:Mahesh
ID: 39843013
You can run query against inactive computers to find them and disable them

dsquery computer -inactive 4 -limit 0 > C:\inactiveComps.txt

Then check the list of computers from output and if ok then run below command to disable them as well
dsquery computer -inactive 4 -limit 0 | dsmod computer -disabled yes

4 represents four weeks of inactivity

http://www.servercare.nl/Lists/Posts/Post.aspx?ID=77

Mahesh
0
 

Author Comment

by:StrataDecisionIT
ID: 39843043
Thanks, Mahesh, but you've missed my objective.  Allow me to restate it in the form of a scenario:

1. A user borrows a laptop computer from us on 1 March.  He is supposed to return the computer to us on 15 March.

2. The user may or may not use the computer to connect to the domain via VPN.

3. On 16 March, the user still has the laptop at his home.  

I would like for him to be unable to log into the computer at this point.  Or, maybe he logs in and sees a message that all network connections have been disabled.  In any case, something happens to render the computer essentially useless.

Thanks,
Shawn
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39843114
Ok
Technically you cannot control this type of restriction through computer accounts

U could do that by putting restrictions on user account as this is the only way I can see.
Because Computer account in AD never ever get idea that the physical laptop associated with that account gone to home along with user and it need to be disabled \ restricted after 15 days

For Ex:
User borrow laptop today.
You need to set user account properties in AD so that it will be expired after 15 days from the date of issuance of laptop
if user try to access \ logon with his account on 16th day, he can't
In that case he must come to office with laptop and submit the same and you could make his account non expiring

OR

Simplest way to do this, on 16th day you could disable his user account

Mahesh
0
 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 500 total points
ID: 39843384
This all depends on the level of access rights you grant the user.  If the user is made an admin on the local machine, then they can uninstall any software and/or create additional user accounts to bypass whatever restrictions you put in place.

If you only grant users Power User rights or less, then you can create a scheduled task that disables networking on a certain date.  or disable cached credentials and give them a local account... then you can set the account to expire with a scheduled task (disable).

You could also install remove control software and when the machine goes online, remote in and disable.

You can easily get creative and do a variety of things that render the laptop essentially useless.  Especially if you reset a standard image on it before loaning it out.
0
 

Author Closing Comment

by:StrataDecisionIT
ID: 39847571
YES, that's what I was looking for--the scheduled task to disable the network interfaces.  Great idea!
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
Many people use more than one email account and so it becomes difficult for them to manage them when they use separate accounts,  so, in this article, I have shared an easy way to add Other Mail Accounts in your Google Inbox. It helps to combine all…
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
CodeTwo Sync for iCloud (http://www.codetwo.com/sync-for-icloud?sts=6554) automatically synchronizes your Outlook 2016, 2013, 2010 or 2007 folders with iCloud folders available via iCloud Control Panel. This lets you automatically sync them with…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question