Automatically logging users off at a specified time. 2

[Stevehewitt]

Hey,

I've put a policy on the domain saying that any users who's times expires will get logged off and also enabled the same one but has an "(locally)" on it!
I have got time restrictions on all users for two reasons:

1. Security. Reduces the chance of someone trying to hack in using a current username if the account only works 8am - 7pm
2. Backups/Anti Virus/Cleaning etc. - Hard to backup users emails when they have 3 of them open!!!

The problem I am having is that even though users cannot logon after, say 7pm, if they don't logoff then they can stay an work as long as they like! If a user logs off at 6:59pm and comes back five mins that then fine, the system won't allow them to log back in, but if they logged in at 9:00am and carried on working till 8:00pm then its not a problem!

Is there anyway I can get Windows to log users off automatically at a certian time?

Thanks in advance,

Steve Hewitt

 

[screach]

Well one way I know of is to create a batch file on the individual users machine using the shutdown.exe file and make use of the AT command.

An example of the AT command is found here

http://cs-netlab-01.lynchburg.edu/courses/SysAdmin/WinDOS/AtExamps.htm

the shutdown.exe can be gotten off the windows2k resource disk.

I am sure this can also be done through AD but I am still learning AD so not too sure how to accomplish this that way.

Screach.....the sound of your world coming to an end at the sight of the dreaded BSOD!

 

[Stevehewitt]

Hey thanks,

I'll check it out and post back.

Thanks

Steve Hewitt

 

[fujiphoneguy]

You don't even have to run it from the workstation itself, you can launch shutdown.exe from any user account who is a local administrator on that machine. Domain Admins group is added to machines by default when they join the domain, so you wouldn't even have to visit each machine (as long as you left that setting on each machine)