Force Logoff after Logoff Hours

[Gantlett]

Hello everyone

I'm using Windows Server 2003 and would like to force all my users (XP Pro) to be logged off after logon hours expire.

The problem is that after logon hours have expired, logged on users remain logged on. They will not be logged off automatically by the system, instead they'll be denied log on only if they log off or try to log on after logon hours.

Does anyone know how I can force the users to log off automatically after logon hours have expired?

Thanks a lot,

Gantlett.

[nitroshift]

gpedit.msc

[Gantlett]

Errr - I know that!

But where?

I looked all over!

I really really did! And I still can't find the answer... It's been three days now

Thanks.

[cluberti]

http://technet2.microsoft.com/WindowsServe...3.mspx?mfr=true

I believe your domain must be at 2003 functional level for the forced logoff to work, but I'm not 100% certain.

[nmX.Memnoch]

In the Group Policy Management console either edit the Default Domain Policy or create a new policy and go here:

GPO Name

-Windows Settings

--Security Settings

---Local Policies

----Security Options

Now look for the following two items and set them to Enabled:

Microsoft network server: Disconnect clients when logon hours expire

Network security: Force logoff when logon hours expire

The first setting should be applied to all servers as well as workstations so that you don't end up with sessions hung open.

I'm also with cluberti on this one...I'm not sure about the functional level either. Also, if you create a new policy instead of editing the Default Domain Policy, make sure that you link it to the OUs that contain your computer accounts.