How to force User log off when time expires?

[shocker]

I want to force a user to log off when his logon hours expire.
In the Network Security category (under Group Policy), I enabled the Force
Logoff When Logon Hours Expire policy, but users are never logged off.

I running Windows Server 2003 as a standalone (no domain or AD). the server
is just a rubust workstation, but allow remote users to log in simultaneously.

Is it possible to log users off in this case?

[Rob (Microsoft)]

Not without being able to specify logon hours in the account. I believe that
feature is only in the domain profile.

[shocker]

So, specifyig logon hours with net user /time is not applicable?

The user is now restricted from logging on based on the times set in net
user, but they are never logged off if they account is already logged on when
the time expires.

[Roger Abell [MVP]]

"shocker" <sho...@discussions.microsoft.com> wrote in message
news:C7E3B228-FBF1-45F8...@microsoft.com...

> So, specifyig logon hours with net user /time is not applicable?
>

net user /time
controls when an account can log on, it does not kick logged on
account out

> The user is now restricted from logging on based on the times set in net
> user, but they are never logged off if they account is already logged on
> when
> the time expires.
>

The time set in the network security policy you mentioned only
controls network access and will close off sessions to network
shares based on the logoff time; it has nothing to do with local
login sessions.

[shocker]

Can this accomplish with scripting? I not very familiar with Windows
scripting, but I'm just curious to know if what I want to do is possible on a
local machine.

[Rob (Microsoft)]

You can set up a scheduled task to restart the machine using Shutdown.exe

[shocker]

Shutting down the computer isn't an option, but thanks for all the responses.

[Rob (Microsoft)]

Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
time set for all users not to logon because of backup schedules or whatever,
a Shutdown command with a R switch will reboot the system.

[shocker]

Thanks again Rob. It's just that rebooting the machine is not what I want.
There are only specific users 2 of 5 that need to be forced to logoff if
their time expires. The other users may be active or simply have tasks
running that rebooting will kill.

I guess this is just a limitation of Windows Server 2003 standalone.

[Rob (Microsoft)]

Sorry I couldn't be of more assistance. I'll check with some folks when I
get back in the office on Tuesday to see if there is a script that you can
run to force logoff the user.

[shocker]

Hey, thanks. I'd appreciate that. I hope to hear from you again.

[tin]

why don't you use "shutdown -l" to force the use to logoff?

"shocker" <sho...@discussions.microsoft.com> wrote in message

news:AA9BBEC7-E9FA-465B...@microsoft.com...

[Rob (Microsoft)]

I checked with our CPR team and they don't have a script. Looks like you
will have to use the shutdown -l command in a scheduled task.

[shocker]

Thanks Rob and tin.
the shutdown /i option affects all users so this wont work. Thanks though
for your attention. I has been much appreciated.

s.ali

[tin]

are you talking about logging of terminal users?
you can use the tsdiscon.exe for that!

"shocker" <sho...@discussions.microsoft.com> wrote in message

news:97F07D13-1F86-4AB0...@microsoft.com...

[shocker]

No, I'm talking about a locally log on user.