RE: security



You mean force a logoff of the computer account, or forcefully terminate the
user's session?

I don't know how to force a logoff of the computer account. But, if the goal
is to keep users from using the computers locally as well as to keep them off
the server, then just:
1. set up the network allowed login hours as normal
2. For XP/2k/NT clients, remove all of the local users on each workstation
(except admin and guest, and make sure the guest is disabled and admin has a
nice strong secret password). This will force users to log into the network
to get access to anything.
3. For 9x clients, there is a policy setting that forces them to
authenticate to the domain before allowing anyone into anything. Of course,
it's 9x, so there's many relatively easy ways around this, but, hey, you have
to start somewhere

-bruce d



"Darin MacKenzie" wrote:

> hi i am running windows 2000 server and it is a domain controller, i was
> wondering if the was a way that i can force a logoff to a user (computer
> logoff not network logoff) when their logon hours expire??
.



Relevant Pages

  • Re: Auto Starting Application on Specific Computer
    ... the Computer Account, and Logon and Logoff-Scripts for the Useraccount. ... To make sure I understand the suggestion, you want the user's login script ... Logoff scripts don't seem to meet the second part of my requirement. ...
    (microsoft.public.windows.server.active_directory)
  • Re: WinXP does not connect to Domain (W2K)
    ... I would remove the computer account from the domain controller, ... You will be warned that the computer account could not ... the computer to the network and re-join the domain. ... issue as above and that should also resolve the odd-looking account problem. ...
    (microsoft.public.windowsxp.network_web)
  • User Account Logon Hours
    ... If they Logout, they are ... they can remain connected to the Network. ... Can someone tell me how to Force the Logoff at a Specific ... Prev by Date: ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: No Log Off - Windows 2003 R2 SP2?
    ... Can you please check your group policy under User Configuration->Administrative Templates->Start Menu and Taskbar "Remove Logoff on the Start Menu" is enabled? ... If your machine is joined to a domain, you may also need to check from your domain controller "Active Directory Users and Computers" ...
    (microsoft.public.windows.terminal_services)
  • Re: getting users to logoff
    ... as it is updated at logoff. ... logoff and shutdown at the end of the day. ... remove users from the network at a certain time. ... see which workstations are logged on. ...
    (microsoft.public.windows.server.security)