Question

Locked

Automatic Domain User log off

By artsafe ·
How can i do?

A domain user can automatically logoff after completion of two hours session. Normally session is diconect from server but user is working on client XP. I require user must logoff from client also at the same time when session ends.

I want to implement of more than 10 users of different timings

you may call me at +923007133711
artsafe@hotmail.com

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Try this

by Jacky Howe In reply to Automatic Domain User log ...

Limit User Logon Time in a Domain in Windows Server 2003

http://support.microsoft.com/kb/816666

SUMMARY
This step-by-step article describes how to restrict the hours and days that a user may log on to a Windows Server 2003 domain.

Change Logon Times for a User Account
You can set logon hours for a user account by using one of the following methods: ? Edit the user account properties from the Active Directory directory service Users and Computers snap-in.

Method 1: Using the Active Directory Users and Computers Snap-in
1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, click the container that contains the user account that you want.
3. In the right pane, right-click the user account, and then click Properties.
4. Click the Account tab, and then click Logon Hours.
5. Click All to select all available times, and then click Logon Denied.
6. Select the time blocks that you want to allow this user to log on to the domain, and then click Logon Permitted.

A status line under the logon hours table displays the currently selected logon times. For example, Monday through Friday from 8 A.M. to 5 P.M..
7. When you are finished configuring logon hours, click OK, and then click OK in the user account Properties dialog box.
8. Quit the Active Directory Users and Computers snap-in.

Enforce Logon Time Restrictions Using Group Policy
You can use Group Policy to enforce the logon time restrictions that you apply.

Step 1: Create a Group Policy object
To create a Group Policy object (GPO) that you use to enforce client logon restrictions: 1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, right-click your domain or the organizational unit that contains the domain controllers that you want, and then click Properties.
3. Click the Group Policy tab, and then click New.
4. Type a name for this policy (for example, Account logon restrictions), and then press ENTER.
5. Click Properties, and then click the Security tab.
6. Click to clear the Apply Group Policy check box for the security groups that you want to prevent from having this policy applied. Click to select the Apply Group Policy check box for the groups that you want to have this policy applied. When you are finished, click OK.

Step 2: Enforce Logon Hours Restrictions
1. Start the Active Directory Users and Computers snap-in. To do this, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the console tree, right-click your domain or the organizational unit that contains the domain controller GPO that you want to edit, and then click Properties.
3. Click the Group Policy tab, select the GPO that you want, and then click Edit.
4. Under Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options.
5. In the right pane of the Group Policy snap-in, double-click Microsoft network server: Disconnect clients when logon hours expire.
6. Click to select the Define this policy setting check box, click Enabled, and then click OK.
7. Close the Group Policy snap-in, and then click OK.

Troubleshoot
Group Policy changes are not immediately enforced. Group Policy background processing can take up to 5 minutes to be refreshed on domain controllers, and up to 120 minutes to be refreshed on client computers.
When you have finished configuring the Users, click Start, Run and type in gpupdate /force

Related Discussions

Related Forums