How to force User log off when time expires?

I want to force a user to log off when his logon hours expire.
In the Network Security category (under Group Policy), I enabled the Force
Logoff When Logon Hours Expire policy, but users are never logged off.

I running Windows Server 2003 as a standalone (no domain or AD). the server
is just a rubust workstation, but allow remote users to log in simultaneously.

Is it possible to log users off in this case?

Not without being able to specify logon hours in the account. I believe that
feature is only in the domain profile.

"shocker" wrote:

> I want to force a user to log off when his logon hours expire.
> In the Network Security category (under Group Policy), I enabled the Force
> Logoff When Logon Hours Expire policy, but users are never logged off.
>
> I running Windows Server 2003 as a standalone (no domain or AD). the server
> is just a rubust workstation, but allow remote users to log in simultaneously.
>
> Is it possible to log users off in this case?

So, specifyig logon hours with net user /time is not applicable?

The user is now restricted from logging on based on the times set in net
user, but they are never logged off if they account is already logged on when
the time expires.

"Rob (Microsoft)" wrote:

> Not without being able to specify logon hours in the account. I believe that
> feature is only in the domain profile.
>
> "shocker" wrote:
>
> > I want to force a user to log off when his logon hours expire.
> > In the Network Security category (under Group Policy), I enabled the Force
> > Logoff When Logon Hours Expire policy, but users are never logged off.
> >
> > I running Windows Server 2003 as a standalone (no domain or AD). the server
> > is just a rubust workstation, but allow remote users to log in simultaneously.
> >
> > Is it possible to log users off in this case?

"shocker" <shocker@discussions.microsoft.com> wrote in message
news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> So, specifyig logon hours with net user /time is not applicable?
>
net user /time
controls when an account can log on, it does not kick logged on
account out

> The user is now restricted from logging on based on the times set in net
> user, but they are never logged off if they account is already logged on
> when
> the time expires.
>
The time set in the network security policy you mentioned only
controls network access and will close off sessions to network
shares based on the logoff time; it has nothing to do with local
login sessions.


> "Rob (Microsoft)" wrote:
>
>> Not without being able to specify logon hours in the account. I believe
>> that
>> feature is only in the domain profile.
>>
>> "shocker" wrote:
>>
>> > I want to force a user to log off when his logon hours expire.
>> > In the Network Security category (under Group Policy), I enabled the
>> > Force
>> > Logoff When Logon Hours Expire policy, but users are never logged off.
>> >
>> > I running Windows Server 2003 as a standalone (no domain or AD). the
>> > server
>> > is just a rubust workstation, but allow remote users to log in
>> > simultaneously.
>> >
>> > Is it possible to log users off in this case?

Can this accomplish with scripting? I not very familiar with Windows
scripting, but I'm just curious to know if what I want to do is possible on a
local machine.

"Roger Abell [MVP]" wrote:

> "shocker" <shocker@discussions.microsoft.com> wrote in message
> news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > So, specifyig logon hours with net user /time is not applicable?
> >
> net user /time
> controls when an account can log on, it does not kick logged on
> account out
>
> > The user is now restricted from logging on based on the times set in net
> > user, but they are never logged off if they account is already logged on
> > when
> > the time expires.
> >
> The time set in the network security policy you mentioned only
> controls network access and will close off sessions to network
> shares based on the logoff time; it has nothing to do with local
> login sessions.
>
>
> > "Rob (Microsoft)" wrote:
> >
> >> Not without being able to specify logon hours in the account. I believe
> >> that
> >> feature is only in the domain profile.
> >>
> >> "shocker" wrote:
> >>
> >> > I want to force a user to log off when his logon hours expire.
> >> > In the Network Security category (under Group Policy), I enabled the
> >> > Force
> >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> >> >
> >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> >> > server
> >> > is just a rubust workstation, but allow remote users to log in
> >> > simultaneously.
> >> >
> >> > Is it possible to log users off in this case?
>
>
>

You can set up a scheduled task to restart the machine using Shutdown.exe

"shocker" wrote:

> Can this accomplish with scripting? I not very familiar with Windows
> scripting, but I'm just curious to know if what I want to do is possible on a
> local machine.
>
> "Roger Abell [MVP]" wrote:
>
> > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > So, specifyig logon hours with net user /time is not applicable?
> > >
> > net user /time
> > controls when an account can log on, it does not kick logged on
> > account out
> >
> > > The user is now restricted from logging on based on the times set in net
> > > user, but they are never logged off if they account is already logged on
> > > when
> > > the time expires.
> > >
> > The time set in the network security policy you mentioned only
> > controls network access and will close off sessions to network
> > shares based on the logoff time; it has nothing to do with local
> > login sessions.
> >
> >
> > > "Rob (Microsoft)" wrote:
> > >
> > >> Not without being able to specify logon hours in the account. I believe
> > >> that
> > >> feature is only in the domain profile.
> > >>
> > >> "shocker" wrote:
> > >>
> > >> > I want to force a user to log off when his logon hours expire.
> > >> > In the Network Security category (under Group Policy), I enabled the
> > >> > Force
> > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > >> >
> > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > >> > server
> > >> > is just a rubust workstation, but allow remote users to log in
> > >> > simultaneously.
> > >> >
> > >> > Is it possible to log users off in this case?
> >
> >
> >

Shutting down the computer isn't an option, but thanks for all the responses.

"Rob (Microsoft)" wrote:

> You can set up a scheduled task to restart the machine using Shutdown.exe
>
> "shocker" wrote:
>
> > Can this accomplish with scripting? I not very familiar with Windows
> > scripting, but I'm just curious to know if what I want to do is possible on a
> > local machine.
> >
> > "Roger Abell [MVP]" wrote:
> >
> > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > So, specifyig logon hours with net user /time is not applicable?
> > > >
> > > net user /time
> > > controls when an account can log on, it does not kick logged on
> > > account out
> > >
> > > > The user is now restricted from logging on based on the times set in net
> > > > user, but they are never logged off if they account is already logged on
> > > > when
> > > > the time expires.
> > > >
> > > The time set in the network security policy you mentioned only
> > > controls network access and will close off sessions to network
> > > shares based on the logoff time; it has nothing to do with local
> > > login sessions.
> > >
> > >
> > > > "Rob (Microsoft)" wrote:
> > > >
> > > >> Not without being able to specify logon hours in the account. I believe
> > > >> that
> > > >> feature is only in the domain profile.
> > > >>
> > > >> "shocker" wrote:
> > > >>
> > > >> > I want to force a user to log off when his logon hours expire.
> > > >> > In the Network Security category (under Group Policy), I enabled the
> > > >> > Force
> > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > >> >
> > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > >> > server
> > > >> > is just a rubust workstation, but allow remote users to log in
> > > >> > simultaneously.
> > > >> >
> > > >> > Is it possible to log users off in this case?
> > >
> > >
> > >

Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
time set for all users not to logon because of backup schedules or whatever,
a Shutdown command with a R switch will reboot the system.

"shocker" wrote:

> Shutting down the computer isn't an option, but thanks for all the responses.
>
> "Rob (Microsoft)" wrote:
>
> > You can set up a scheduled task to restart the machine using Shutdown.exe
> >
> > "shocker" wrote:
> >
> > > Can this accomplish with scripting? I not very familiar with Windows
> > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > local machine.
> > >
> > > "Roger Abell [MVP]" wrote:
> > >
> > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > >
> > > > net user /time
> > > > controls when an account can log on, it does not kick logged on
> > > > account out
> > > >
> > > > > The user is now restricted from logging on based on the times set in net
> > > > > user, but they are never logged off if they account is already logged on
> > > > > when
> > > > > the time expires.
> > > > >
> > > > The time set in the network security policy you mentioned only
> > > > controls network access and will close off sessions to network
> > > > shares based on the logoff time; it has nothing to do with local
> > > > login sessions.
> > > >
> > > >
> > > > > "Rob (Microsoft)" wrote:
> > > > >
> > > > >> Not without being able to specify logon hours in the account. I believe
> > > > >> that
> > > > >> feature is only in the domain profile.
> > > > >>
> > > > >> "shocker" wrote:
> > > > >>
> > > > >> > I want to force a user to log off when his logon hours expire.
> > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > >> > Force
> > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > >> >
> > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > >> > server
> > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > >> > simultaneously.
> > > > >> >
> > > > >> > Is it possible to log users off in this case?
> > > >
> > > >
> > > >

Thanks again Rob. It's just that rebooting the machine is not what I want.
There are only specific users 2 of 5 that need to be forced to logoff if
their time expires. The other users may be active or simply have tasks
running that rebooting will kill.

I guess this is just a limitation of Windows Server 2003 standalone.

"Rob (Microsoft)" wrote:

> Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
> time set for all users not to logon because of backup schedules or whatever,
> a Shutdown command with a R switch will reboot the system.
>
> "shocker" wrote:
>
> > Shutting down the computer isn't an option, but thanks for all the responses.
> >
> > "Rob (Microsoft)" wrote:
> >
> > > You can set up a scheduled task to restart the machine using Shutdown.exe
> > >
> > > "shocker" wrote:
> > >
> > > > Can this accomplish with scripting? I not very familiar with Windows
> > > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > > local machine.
> > > >
> > > > "Roger Abell [MVP]" wrote:
> > > >
> > > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > > >
> > > > > net user /time
> > > > > controls when an account can log on, it does not kick logged on
> > > > > account out
> > > > >
> > > > > > The user is now restricted from logging on based on the times set in net
> > > > > > user, but they are never logged off if they account is already logged on
> > > > > > when
> > > > > > the time expires.
> > > > > >
> > > > > The time set in the network security policy you mentioned only
> > > > > controls network access and will close off sessions to network
> > > > > shares based on the logoff time; it has nothing to do with local
> > > > > login sessions.
> > > > >
> > > > >
> > > > > > "Rob (Microsoft)" wrote:
> > > > > >
> > > > > >> Not without being able to specify logon hours in the account. I believe
> > > > > >> that
> > > > > >> feature is only in the domain profile.
> > > > > >>
> > > > > >> "shocker" wrote:
> > > > > >>
> > > > > >> > I want to force a user to log off when his logon hours expire.
> > > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > > >> > Force
> > > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > > >> >
> > > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > > >> > server
> > > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > > >> > simultaneously.
> > > > > >> >
> > > > > >> > Is it possible to log users off in this case?
> > > > >
> > > > >
> > > > >

Sorry I couldn't be of more assistance. I'll check with some folks when I
get back in the office on Tuesday to see if there is a script that you can
run to force logoff the user.

"shocker" wrote:

> Thanks again Rob. It's just that rebooting the machine is not what I want.
> There are only specific users 2 of 5 that need to be forced to logoff if
> their time expires. The other users may be active or simply have tasks
> running that rebooting will kill.
>
> I guess this is just a limitation of Windows Server 2003 standalone.
>
> "Rob (Microsoft)" wrote:
>
> > Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
> > time set for all users not to logon because of backup schedules or whatever,
> > a Shutdown command with a R switch will reboot the system.
> >
> > "shocker" wrote:
> >
> > > Shutting down the computer isn't an option, but thanks for all the responses.
> > >
> > > "Rob (Microsoft)" wrote:
> > >
> > > > You can set up a scheduled task to restart the machine using Shutdown.exe
> > > >
> > > > "shocker" wrote:
> > > >
> > > > > Can this accomplish with scripting? I not very familiar with Windows
> > > > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > > > local machine.
> > > > >
> > > > > "Roger Abell [MVP]" wrote:
> > > > >
> > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > > > >
> > > > > > net user /time
> > > > > > controls when an account can log on, it does not kick logged on
> > > > > > account out
> > > > > >
> > > > > > > The user is now restricted from logging on based on the times set in net
> > > > > > > user, but they are never logged off if they account is already logged on
> > > > > > > when
> > > > > > > the time expires.
> > > > > > >
> > > > > > The time set in the network security policy you mentioned only
> > > > > > controls network access and will close off sessions to network
> > > > > > shares based on the logoff time; it has nothing to do with local
> > > > > > login sessions.
> > > > > >
> > > > > >
> > > > > > > "Rob (Microsoft)" wrote:
> > > > > > >
> > > > > > >> Not without being able to specify logon hours in the account. I believe
> > > > > > >> that
> > > > > > >> feature is only in the domain profile.
> > > > > > >>
> > > > > > >> "shocker" wrote:
> > > > > > >>
> > > > > > >> > I want to force a user to log off when his logon hours expire.
> > > > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > > > >> > Force
> > > > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > > > >> >
> > > > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > > > >> > server
> > > > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > > > >> > simultaneously.
> > > > > > >> >
> > > > > > >> > Is it possible to log users off in this case?
> > > > > >
> > > > > >
> > > > > >

Hey, thanks. I'd appreciate that. I hope to hear from you again.

"Rob (Microsoft)" wrote:

> Sorry I couldn't be of more assistance. I'll check with some folks when I
> get back in the office on Tuesday to see if there is a script that you can
> run to force logoff the user.
>
> "shocker" wrote:
>
> > Thanks again Rob. It's just that rebooting the machine is not what I want.
> > There are only specific users 2 of 5 that need to be forced to logoff if
> > their time expires. The other users may be active or simply have tasks
> > running that rebooting will kill.
> >
> > I guess this is just a limitation of Windows Server 2003 standalone.
> >
> > "Rob (Microsoft)" wrote:
> >
> > > Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
> > > time set for all users not to logon because of backup schedules or whatever,
> > > a Shutdown command with a R switch will reboot the system.
> > >
> > > "shocker" wrote:
> > >
> > > > Shutting down the computer isn't an option, but thanks for all the responses.
> > > >
> > > > "Rob (Microsoft)" wrote:
> > > >
> > > > > You can set up a scheduled task to restart the machine using Shutdown.exe
> > > > >
> > > > > "shocker" wrote:
> > > > >
> > > > > > Can this accomplish with scripting? I not very familiar with Windows
> > > > > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > > > > local machine.
> > > > > >
> > > > > > "Roger Abell [MVP]" wrote:
> > > > > >
> > > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > > > > >
> > > > > > > net user /time
> > > > > > > controls when an account can log on, it does not kick logged on
> > > > > > > account out
> > > > > > >
> > > > > > > > The user is now restricted from logging on based on the times set in net
> > > > > > > > user, but they are never logged off if they account is already logged on
> > > > > > > > when
> > > > > > > > the time expires.
> > > > > > > >
> > > > > > > The time set in the network security policy you mentioned only
> > > > > > > controls network access and will close off sessions to network
> > > > > > > shares based on the logoff time; it has nothing to do with local
> > > > > > > login sessions.
> > > > > > >
> > > > > > >
> > > > > > > > "Rob (Microsoft)" wrote:
> > > > > > > >
> > > > > > > >> Not without being able to specify logon hours in the account. I believe
> > > > > > > >> that
> > > > > > > >> feature is only in the domain profile.
> > > > > > > >>
> > > > > > > >> "shocker" wrote:
> > > > > > > >>
> > > > > > > >> > I want to force a user to log off when his logon hours expire.
> > > > > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > > > > >> > Force
> > > > > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > > > > >> >
> > > > > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > > > > >> > server
> > > > > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > > > > >> > simultaneously.
> > > > > > > >> >
> > > > > > > >> > Is it possible to log users off in this case?
> > > > > > >
> > > > > > >
> > > > > > >

why don't you use "shutdown -l" to force the use to logoff?

"shocker" <shocker@discussions.microsoft.com> wrote in message
news:AA9BBEC7-E9FA-465B-B441-FDBC600FC198@microsoft.com...
> Hey, thanks. I'd appreciate that. I hope to hear from you again.
>
> "Rob (Microsoft)" wrote:
>
>> Sorry I couldn't be of more assistance. I'll check with some folks when
>> I
>> get back in the office on Tuesday to see if there is a script that you
>> can
>> run to force logoff the user.
>>
>> "shocker" wrote:
>>
>> > Thanks again Rob. It's just that rebooting the machine is not what I
>> > want.
>> > There are only specific users 2 of 5 that need to be forced to logoff
>> > if
>> > their time expires. The other users may be active or simply have tasks
>> > running that rebooting will kill.
>> >
>> > I guess this is just a limitation of Windows Server 2003 standalone.
>> >
>> > "Rob (Microsoft)" wrote:
>> >
>> > > Shutdown.exe can be used to reboot a box not just shutdown. So if
>> > > you have a
>> > > time set for all users not to logon because of backup schedules or
>> > > whatever,
>> > > a Shutdown command with a R switch will reboot the system.
>> > >
>> > > "shocker" wrote:
>> > >
>> > > > Shutting down the computer isn't an option, but thanks for all the
>> > > > responses.
>> > > >
>> > > > "Rob (Microsoft)" wrote:
>> > > >
>> > > > > You can set up a scheduled task to restart the machine using
>> > > > > Shutdown.exe
>> > > > >
>> > > > > "shocker" wrote:
>> > > > >
>> > > > > > Can this accomplish with scripting? I not very familiar with
>> > > > > > Windows
>> > > > > > scripting, but I'm just curious to know if what I want to do is
>> > > > > > possible on a
>> > > > > > local machine.
>> > > > > >
>> > > > > > "Roger Abell [MVP]" wrote:
>> > > > > >
>> > > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in
>> > > > > > > message
>> > > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
>> > > > > > > > So, specifyig logon hours with net user /time is not
>> > > > > > > > applicable?
>> > > > > > > >
>> > > > > > > net user /time
>> > > > > > > controls when an account can log on, it does not kick logged
>> > > > > > > on
>> > > > > > > account out
>> > > > > > >
>> > > > > > > > The user is now restricted from logging on based on the
>> > > > > > > > times set in net
>> > > > > > > > user, but they are never logged off if they account is
>> > > > > > > > already logged on
>> > > > > > > > when
>> > > > > > > > the time expires.
>> > > > > > > >
>> > > > > > > The time set in the network security policy you mentioned
>> > > > > > > only
>> > > > > > > controls network access and will close off sessions to
>> > > > > > > network
>> > > > > > > shares based on the logoff time; it has nothing to do with
>> > > > > > > local
>> > > > > > > login sessions.
>> > > > > > >
>> > > > > > >
>> > > > > > > > "Rob (Microsoft)" wrote:
>> > > > > > > >
>> > > > > > > >> Not without being able to specify logon hours in the
>> > > > > > > >> account. I believe
>> > > > > > > >> that
>> > > > > > > >> feature is only in the domain profile.
>> > > > > > > >>
>> > > > > > > >> "shocker" wrote:
>> > > > > > > >>
>> > > > > > > >> > I want to force a user to log off when his logon hours
>> > > > > > > >> > expire.
>> > > > > > > >> > In the Network Security category (under Group Policy), I
>> > > > > > > >> > enabled the
>> > > > > > > >> > Force
>> > > > > > > >> > Logoff When Logon Hours Expire policy, but users are
>> > > > > > > >> > never logged off.
>> > > > > > > >> >
>> > > > > > > >> > I running Windows Server 2003 as a standalone (no domain
>> > > > > > > >> > or AD). the
>> > > > > > > >> > server
>> > > > > > > >> > is just a rubust workstation, but allow remote users to
>> > > > > > > >> > log in
>> > > > > > > >> > simultaneously.
>> > > > > > > >> >
>> > > > > > > >> > Is it possible to log users off in this case?
>> > > > > > >
>> > > > > > >
>> > > > > > >

I checked with our CPR team and they don't have a script. Looks like you
will have to use the shutdown -l command in a scheduled task.

"shocker" wrote:

> Hey, thanks. I'd appreciate that. I hope to hear from you again.
>
> "Rob (Microsoft)" wrote:
>
> > Sorry I couldn't be of more assistance. I'll check with some folks when I
> > get back in the office on Tuesday to see if there is a script that you can
> > run to force logoff the user.
> >
> > "shocker" wrote:
> >
> > > Thanks again Rob. It's just that rebooting the machine is not what I want.
> > > There are only specific users 2 of 5 that need to be forced to logoff if
> > > their time expires. The other users may be active or simply have tasks
> > > running that rebooting will kill.
> > >
> > > I guess this is just a limitation of Windows Server 2003 standalone.
> > >
> > > "Rob (Microsoft)" wrote:
> > >
> > > > Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
> > > > time set for all users not to logon because of backup schedules or whatever,
> > > > a Shutdown command with a R switch will reboot the system.
> > > >
> > > > "shocker" wrote:
> > > >
> > > > > Shutting down the computer isn't an option, but thanks for all the responses.
> > > > >
> > > > > "Rob (Microsoft)" wrote:
> > > > >
> > > > > > You can set up a scheduled task to restart the machine using Shutdown.exe
> > > > > >
> > > > > > "shocker" wrote:
> > > > > >
> > > > > > > Can this accomplish with scripting? I not very familiar with Windows
> > > > > > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > > > > > local machine.
> > > > > > >
> > > > > > > "Roger Abell [MVP]" wrote:
> > > > > > >
> > > > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > > > > > >
> > > > > > > > net user /time
> > > > > > > > controls when an account can log on, it does not kick logged on
> > > > > > > > account out
> > > > > > > >
> > > > > > > > > The user is now restricted from logging on based on the times set in net
> > > > > > > > > user, but they are never logged off if they account is already logged on
> > > > > > > > > when
> > > > > > > > > the time expires.
> > > > > > > > >
> > > > > > > > The time set in the network security policy you mentioned only
> > > > > > > > controls network access and will close off sessions to network
> > > > > > > > shares based on the logoff time; it has nothing to do with local
> > > > > > > > login sessions.
> > > > > > > >
> > > > > > > >
> > > > > > > > > "Rob (Microsoft)" wrote:
> > > > > > > > >
> > > > > > > > >> Not without being able to specify logon hours in the account. I believe
> > > > > > > > >> that
> > > > > > > > >> feature is only in the domain profile.
> > > > > > > > >>
> > > > > > > > >> "shocker" wrote:
> > > > > > > > >>
> > > > > > > > >> > I want to force a user to log off when his logon hours expire.
> > > > > > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > > > > > >> > Force
> > > > > > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > > > > > >> >
> > > > > > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > > > > > >> > server
> > > > > > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > > > > > >> > simultaneously.
> > > > > > > > >> >
> > > > > > > > >> > Is it possible to log users off in this case?
> > > > > > > >
> > > > > > > >
> > > > > > > >

Thanks Rob and tin.
the shutdown /i option affects all users so this wont work. Thanks though
for your attention. I has been much appreciated.

s.ali

"shocker" wrote:

> Hey, thanks. I'd appreciate that. I hope to hear from you again.
>
> "Rob (Microsoft)" wrote:
>
> > Sorry I couldn't be of more assistance. I'll check with some folks when I
> > get back in the office on Tuesday to see if there is a script that you can
> > run to force logoff the user.
> >
> > "shocker" wrote:
> >
> > > Thanks again Rob. It's just that rebooting the machine is not what I want.
> > > There are only specific users 2 of 5 that need to be forced to logoff if
> > > their time expires. The other users may be active or simply have tasks
> > > running that rebooting will kill.
> > >
> > > I guess this is just a limitation of Windows Server 2003 standalone.
> > >
> > > "Rob (Microsoft)" wrote:
> > >
> > > > Shutdown.exe can be used to reboot a box not just shutdown. So if you have a
> > > > time set for all users not to logon because of backup schedules or whatever,
> > > > a Shutdown command with a R switch will reboot the system.
> > > >
> > > > "shocker" wrote:
> > > >
> > > > > Shutting down the computer isn't an option, but thanks for all the responses.
> > > > >
> > > > > "Rob (Microsoft)" wrote:
> > > > >
> > > > > > You can set up a scheduled task to restart the machine using Shutdown.exe
> > > > > >
> > > > > > "shocker" wrote:
> > > > > >
> > > > > > > Can this accomplish with scripting? I not very familiar with Windows
> > > > > > > scripting, but I'm just curious to know if what I want to do is possible on a
> > > > > > > local machine.
> > > > > > >
> > > > > > > "Roger Abell [MVP]" wrote:
> > > > > > >
> > > > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in message
> > > > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
> > > > > > > > > So, specifyig logon hours with net user /time is not applicable?
> > > > > > > > >
> > > > > > > > net user /time
> > > > > > > > controls when an account can log on, it does not kick logged on
> > > > > > > > account out
> > > > > > > >
> > > > > > > > > The user is now restricted from logging on based on the times set in net
> > > > > > > > > user, but they are never logged off if they account is already logged on
> > > > > > > > > when
> > > > > > > > > the time expires.
> > > > > > > > >
> > > > > > > > The time set in the network security policy you mentioned only
> > > > > > > > controls network access and will close off sessions to network
> > > > > > > > shares based on the logoff time; it has nothing to do with local
> > > > > > > > login sessions.
> > > > > > > >
> > > > > > > >
> > > > > > > > > "Rob (Microsoft)" wrote:
> > > > > > > > >
> > > > > > > > >> Not without being able to specify logon hours in the account. I believe
> > > > > > > > >> that
> > > > > > > > >> feature is only in the domain profile.
> > > > > > > > >>
> > > > > > > > >> "shocker" wrote:
> > > > > > > > >>
> > > > > > > > >> > I want to force a user to log off when his logon hours expire.
> > > > > > > > >> > In the Network Security category (under Group Policy), I enabled the
> > > > > > > > >> > Force
> > > > > > > > >> > Logoff When Logon Hours Expire policy, but users are never logged off.
> > > > > > > > >> >
> > > > > > > > >> > I running Windows Server 2003 as a standalone (no domain or AD). the
> > > > > > > > >> > server
> > > > > > > > >> > is just a rubust workstation, but allow remote users to log in
> > > > > > > > >> > simultaneously.
> > > > > > > > >> >
> > > > > > > > >> > Is it possible to log users off in this case?
> > > > > > > >
> > > > > > > >
> > > > > > > >

are you talking about logging of terminal users?
you can use the tsdiscon.exe for that!

"shocker" <shocker@discussions.microsoft.com> wrote in message
news:97F07D13-1F86-4AB0-94B3-A7370C5BCADD@microsoft.com...
> Thanks Rob and tin.
> the shutdown /i option affects all users so this wont work. Thanks though
> for your attention. I has been much appreciated.
>
> s.ali
>
> "shocker" wrote:
>
>> Hey, thanks. I'd appreciate that. I hope to hear from you again.
>>
>> "Rob (Microsoft)" wrote:
>>
>> > Sorry I couldn't be of more assistance. I'll check with some folks
>> > when I
>> > get back in the office on Tuesday to see if there is a script that you
>> > can
>> > run to force logoff the user.
>> >
>> > "shocker" wrote:
>> >
>> > > Thanks again Rob. It's just that rebooting the machine is not what I
>> > > want.
>> > > There are only specific users 2 of 5 that need to be forced to logoff
>> > > if
>> > > their time expires. The other users may be active or simply have
>> > > tasks
>> > > running that rebooting will kill.
>> > >
>> > > I guess this is just a limitation of Windows Server 2003 standalone.
>> > >
>> > > "Rob (Microsoft)" wrote:
>> > >
>> > > > Shutdown.exe can be used to reboot a box not just shutdown. So if
>> > > > you have a
>> > > > time set for all users not to logon because of backup schedules or
>> > > > whatever,
>> > > > a Shutdown command with a R switch will reboot the system.
>> > > >
>> > > > "shocker" wrote:
>> > > >
>> > > > > Shutting down the computer isn't an option, but thanks for all
>> > > > > the responses.
>> > > > >
>> > > > > "Rob (Microsoft)" wrote:
>> > > > >
>> > > > > > You can set up a scheduled task to restart the machine using
>> > > > > > Shutdown.exe
>> > > > > >
>> > > > > > "shocker" wrote:
>> > > > > >
>> > > > > > > Can this accomplish with scripting? I not very familiar with
>> > > > > > > Windows
>> > > > > > > scripting, but I'm just curious to know if what I want to do
>> > > > > > > is possible on a
>> > > > > > > local machine.
>> > > > > > >
>> > > > > > > "Roger Abell [MVP]" wrote:
>> > > > > > >
>> > > > > > > > "shocker" <shocker@discussions.microsoft.com> wrote in
>> > > > > > > > message
>> > > > > > > > news:C7E3B228-FBF1-45F8-945D-26D13C4A20C6@microsoft.com...
>> > > > > > > > > So, specifyig logon hours with net user /time is not
>> > > > > > > > > applicable?
>> > > > > > > > >
>> > > > > > > > net user /time
>> > > > > > > > controls when an account can log on, it does not kick
>> > > > > > > > logged on
>> > > > > > > > account out
>> > > > > > > >
>> > > > > > > > > The user is now restricted from logging on based on the
>> > > > > > > > > times set in net
>> > > > > > > > > user, but they are never logged off if they account is
>> > > > > > > > > already logged on
>> > > > > > > > > when
>> > > > > > > > > the time expires.
>> > > > > > > > >
>> > > > > > > > The time set in the network security policy you mentioned
>> > > > > > > > only
>> > > > > > > > controls network access and will close off sessions to
>> > > > > > > > network
>> > > > > > > > shares based on the logoff time; it has nothing to do with
>> > > > > > > > local
>> > > > > > > > login sessions.
>> > > > > > > >
>> > > > > > > >
>> > > > > > > > > "Rob (Microsoft)" wrote:
>> > > > > > > > >
>> > > > > > > > >> Not without being able to specify logon hours in the
>> > > > > > > > >> account. I believe
>> > > > > > > > >> that
>> > > > > > > > >> feature is only in the domain profile.
>> > > > > > > > >>
>> > > > > > > > >> "shocker" wrote:
>> > > > > > > > >>
>> > > > > > > > >> > I want to force a user to log off when his logon hours
>> > > > > > > > >> > expire.
>> > > > > > > > >> > In the Network Security category (under Group Policy),
>> > > > > > > > >> > I enabled the
>> > > > > > > > >> > Force
>> > > > > > > > >> > Logoff When Logon Hours Expire policy, but users are
>> > > > > > > > >> > never logged off.
>> > > > > > > > >> >
>> > > > > > > > >> > I running Windows Server 2003 as a standalone (no
>> > > > > > > > >> > domain or AD). the
>> > > > > > > > >> > server
>> > > > > > > > >> > is just a rubust workstation, but allow remote users
>> > > > > > > > >> > to log in
>> > > > > > > > >> > simultaneously.
>> > > > > > > > >> >
>> > > > > > > > >> > Is it possible to log users off in this case?
>> > > > > > > >
>> > > > > > > >
>> > > > > > > >