NT Domain

You can certainly set the hours allowed in User Manager For Domains under user properties. This will restrict the amount of time each user can stay on the network. And I think there's an option in Account Policies where you can set the server to forcably disconnect users when their hours expire.

hope this helps

Under user manager or user manager for domains you need to set the hours for the user under user properties. In Policies, yes you can forcibly disconnect a user when the logon hours expire. However this does not lock them out for ever, just until hours set for the user.

System policy editor does not allow you to do what you want in time restrictions. I believe there are utilities available in the NT resource kit and third party software to have more controls.

Good luck

In user account manager, click on account. There, you can change the "Expiration date" from NEVER to any date you want. On that date, he is gone.

Regards
George