Re: how to restrict log on hours for child user

From: David Dickinson [MVP] (eis@no-spam.softhome.net)
Date: 06/26/02 

From: "David Dickinson [MVP]" <eis@no-spam.softhome.net>
Date: Wed, 26 Jun 2002 05:10:16 -0600

On Tue, 25 Jun 2002 21:32:12 -0700, "frustrated mom \(rachel\)"
<bellsuck@bellsouth.net> wrote:

> I need a somewhat transparent way (to user) to restrict
> the hours my son can log on to our home pc. He is 16 with
> a good working knowledge of PCs and a large capacity (and
> desire) to hack his user settings. We are running windows
> 2000 professional, single PC (no longer attached to
> network but PC identification still set on the workgroup
> it was previously assigned to), and he is on the Power
> User setting. I read a MSDN article that says you can't
> restrict user hours in a workgroup environment on the
> win2k environment. I tried changing the id, but computer
> wouldn't log on to internet (??) so changed it back and no
> problems. A.) Is there a work-around to this? (NOTE-
> computer management console waaaaaaay confusing so need
> good instructions if I need to work in this utility) B.)
> Are there any other parents out there who have found good
> ways to restrict usage aside from log on hours?
>
> Signed,
> Desparate Mom in Florida with Urgent Need to Raise Son's
> GPA (thanks a million)

Dear Desperate Mom,

Unfortunately, in a workgroup environment or on a standalone system, Windows
2000 Professional does not have a way to restrict logon hours. See the
Knowledgebase Article

You Cannot Use Logon Hours with a Windows 2000 Professional-Based Computer
That Is in a Workgroup (Q274435)
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q274435

The machine would have to be a member of an Active Directory domain. This
would require that you have a Windows 2000 Server domain controller (a very
expensive item for a home network environment and that requires training and
extra attention). You would have to manually disable your son's account
when you didn't want him to be able to use the computer.

To do that, log on as Administrator. Click the Start button, select
Settings, and open Control Panel. Double-click Administrative Tools, then
double-click Computer Management. This will open the Microsoft Management
Console Computer Management snap-in.

In the folder tree on the left-hand pane of the window, click the little
plus sign next to Local Users and Groups. In the Users folder, double-click
your son's account. You'll see a checkbox labeled "Account is disabled".
If you put a checkmark there and click OK, your son will not be able to log
in using his account until you re-enable the account.

These are the kind of situations that make me wish that computers still came
with keyboard locks and make me think of Bill Cosby's threat to his TV son:
"I brought you into this world, and I can take you out."

David Dickinson, MVP (Security)
EveningStar Information Services
eis @ softhome . net

EveningStar's Summary of Microsoft Security Bulletins
http://www.zianet.com/bwd/securitybulletins.asp