Actually... Windows 2000 Administrators have an option in the Active Directory Users & Computers GUI to limit the user's logon hours, local administrators (Windows 2000 Workstation) do not have that option in the Local Users and Groups console. In order to do that you'll need to use the NET USER command. Some examples would be: net user sonny /time:S-F,08:00-18:00 net user sonny /time:S-F,8am-6pm net user sonny /time:M,4am-4pm;T,1pm-3pm;W-F,8:00-16:00 net user sonny /time:all Open a Command Prompt window. Enter the appropriate "net user" command for the user(s) you wish to restrict access for. Local users can't be forced off when logon hours expire. I may be mistaken, but I think this works from NT and up (NT, 2000, XP, 2003).