Re: Limit User Logon Time in a Domain in Windows 2000

From: Alex (kalex@entri.com.ua)
Date: 02/19/03 

From: "Alex" <kalex@entri.com.ua>
Date: Wed, 19 Feb 2003 03:52:49 -0800

Hi Wen Lee,

In the properties domain\user (account tab - logon hours)
we put the time allowed for logon, and we can do it
successfully, i.e. user cannot log on to the domain.
Furthermore, in the Group Policy there is a policy -
Automatically log off users when logon time expires
(local).
We have created GPO in accordance with KB Q318714
http://support.microsoft.com/default.aspx?scid=kb;en-
us;318714 and we have thoroughly examined and deployed it.
It doesn't work. We have used the advice given
in "Troubleshooting" Section.
secedit /refreshpolicy user_policy /enforce
secedit /refreshpolicy machine_policy /enforce
And after all these measures it doesn't work all the same.
We are waiting for your help or advice on this matter.
Thank you in advance.

Best regards,
Alex

>-----Original Message-----
>Hi Alex,
>
>Can you plese provide more details about how you deployed
the policies.
>
>Can you give us some idea of your OU structure and/or
security groups.
>
>Thanks
>
>Wen [MSFT]
>
>"Alex" <kalex@entri.com.ua> wrote in message
news:<05e901c2d745$5a63cb40$a201280a@phx.gbl>...
>> Hi
>> Group Policy - Computer configuration - windows
setting -
>> security settings - Local policies - security options -
>> automatically log off users when logon time expires
>>
>> KB - Q318714. Limit User Logon Time in a Domain in
>> Windows 2000. Enforce logon time restrictions using
group
>> policy.
>>
>> Don`t work. Help PLZ
>.
>

Relevant Pages

  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Client Configuration
    ... Thanks for quickly updates. ... Just as I know, if you only logon the domain with cache credential, the ... group policy will not be updates, instead it will use the old policy that ... dial up VPN connection to logon SBS domain once-in-a-while for the group ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Desktop not working after SP1
    ... "The local policy does not permit you to logon interactively" error message ... Remote Desktop Users ... Use the ISAinfo utility to collect the ISA configuration information: ...
    (microsoft.public.windows.server.sbs)
  • Re: No Shut Down or Restart for Domain Admins
    ... run rsop.msc from your DC and check which policy is responsible to this. ... I have created a group policy in a development network and imported it ... NT AUTHORITY\Authenticated Users Read (from Security Filtering) No ... Enforce user logon restrictions Enabled ...
    (microsoft.public.windows.server.active_directory)