AD-logon hours

Andy
Andy used Ask the Experts™
on
Hello,
I need to restrict logon hours for one active directory user.
Is this right procedure?
https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-set-logon-hours-in-active-directory.html
If user is already loged on and  logon hours expires does this option by force log off user?
I need to log off user by force when logon hours expires.
Thank you
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016
Commented:
one more item to add to group policy
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Network security: Force logoff when logon hours expire to Enabled
Shabarinath RamadasanInfrastructure Architect

Commented:
Hello Andy,

For forced logoff after logon hour expiry - You need to configure a different setting in GPO.

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj852195(v%3Dws.11)

However, this will not be impacted for administrator accounts.

Cheers !

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial