Re: Enforce user account restrictions policy

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

Thank you for your patience. We did further research regarding the policy,
I am afraid that this policy cannot restrict the user from getting session
ticket after it logs on a computer and logon hours expire. To restrict
users from getting ticket, you need to force the users to logoff when logon
hours expire.

You may also enable the "Disconnect clients when logon hours expire"
policy. However, please understand that this policy will also not
disconnect client automatically. It only works when a user logs off and
logs on, or unlock a computer.

Microsoft network server: Disconnect clients when logon hours expire
http://technet.microsoft.com/fr-fr/library/cc758192(en-us).aspx

Sincerely,
Joson Zhou
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Logging a user off at a certain time
    ... Use the Default domain policy. ... Disconnect client when logon hours ... Microsoft network server: Disconnect clients when logon hours expire: This ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO problem
    ... client's SMB connection to the servers if their logon hours expired. ... Computer Config> Windows Settings> Security Settings> Local ... hours expire (Enabled) ... This is an account policy and acts like the Password Policies. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Policy
    ... You need to uncheck the box for "password does not expire". ... If you want them all to change at next logon, then you need to set that box. ... I am setting password policy on w2k3 server, ...
    (microsoft.public.windows.server.general)
  • Re: Enforce user account restrictions policy
    ... I am afraid that this policy cannot restrict the user from getting session ... ticket after it logs on a computer and logon hours expire. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)