Force logoff

Is there a setting in the Account Policy to automatically log-off a user when
they are outside of their allowed log-on times? I thought I set that, but
there's one machine that's not logged off. Is it because they need to log
out and log back in for the policy to take effect?

Thanks.
.