Need to force logoff of users

[lorel]

We have a problem with our Win2003 installation, we need to do backups everyday and we need for no user to be in system when the backup starts. All users are in the system via Terminal Services.

Is there an easy way to check for users in the system and terminating their connection to the server? maybe an script running out of AT?

We have told users they need to log off every night but we still get some that "forget" to do it.

Any help?

Thanks

Joe

 

[lhuegele]

Why not use the "shutdown" command to force them to be rebooted? A simple script could be written to send the command to every computer in your subnet.

Good luck,

 

[58sniper]

That could cause data loss.

Lorel - do you need them just off one server, or do you want them completely logged off of the network?

Pat Richard MVP

 

[wcburton]

What are they keeping open that gets skipped?

If it is documents, just advise the users that their document may not be able to be restored because they prevented it being backed up. That would be preferable to forcing them off and losing unsaved changes.

You could also turn on Volume Shadow Copy to protect files in shared folders on the server. We use that to avoid having to go to tape to restore the odd file here and there.

If it is something other than documents that are being kept open, perhaps if you give more details then we could offer more suggestions.

 

[Roadki11]

Well sinse its just TS users why not use GPO or the RDP connector properties to simply logoff disconnected or idle users after a specified amount of time?



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[cjweaser]

Hi,

There are diff. things that you can do. Through your firewall, setup a time limit for ex. from 7am until 7pm. Secondly through your GPO --> User Config -->Admin Templates -->Windows Components --> Terminal Server --> Sessions then enable Sets a time limit for active TS Sessions and select how many minutes...hours...etc... 3rd and last from AD, locate Sessions tab.

Hope this helps. Let me know.