<div>
Hi 
 
 
Try the following &nbsp;which should do what you require 
 

<pre><code class="code-10 nolinks" id="code-20-42107420-1">$WorkStations = &quot;NoAvalideWorkstation,YoareAreDisabled&quot; 

[byte[]]$denyhours = @(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)
[byte[]]$hours8-6mon-Friday = @(0,0,0,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,0,0)
[byte[]]$Allhours = @(255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255)
[byte[]]$hours8-6Mon-Sun = @(0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3)

# for all disabled users
get-aduser -filter {endabled -eq $false} | 
 Set-ADUser -LogonWorkstations $Workstations -Add @{logonhours=$denyhours}

# test one user
get-aduser mytestusername | 
 Set-ADUser -LogonWorkstations $Workstations -Add @{logonhours=$denyhours}

 
</code></pre>
</div>

<div>
Thanks Joe, will check it out and get back to you on it, cheers :)
</div>

<div>
just spotted a type o &nbsp; line 9 &nbsp;should be 
 

<pre><code class="code-1 nolinks" id="code-20-42107440-1">get-aduser -filter {enabled -eq $false} | 
</code></pre>
</div>

<div>
I just want to test with one disabled user first is it just a case of using (without the comment) I'm not in a test environment 
 
$WorkStations = &quot;NoAvalideWorkstation,YoareAreDisabled&quot; &nbsp; 
 
[byte[]$denyhours = @(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0) 
[byte[]$hours8-6mon-Friday = @(0,0,0,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,0,0) 
[byte[]$Allhours = @(255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255,255) 
[byte[]$hours8-6Mon-Sun = @(0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3,0,255,3) 
 
 
 
# test one user 
get-aduser mytestusername &nbsp;| 
&nbsp; &nbsp; Set-ADUser -LogonWorkstations $Workstations -Add @{logonhours=$denyhours}
</div>

<div>
<div class="content wysiwyg-content">
With current project , they don't delete user accounts due to audit reasons 
 
Is there any best way to disallow login hours for multiple disabled users and also add a bogus computer account so they can only log onto that?
</div>
</div>

With current project , they don't delete user accounts due to audit reasons

Is there any best way to disallow login hours for multiple disabled users and also add a bogus computer account so they can only log onto that?

Any idea on powershell code to change login workstation and disallow login hours

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.

Powershell

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.