It's the third bit that's tricky. The login hours only seem to be set for the individual user, not for the user on a particular computer. Anyway, I've found the dsmod command and successfully disabled and re-enabled a computer account so I'm happy. Thanks for the help. Angus -----Original Message----- From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx] Sent: 28 October 2005 15:47 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Is it possible to disable a computers domain account at certain t imes windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28, 2005 4:20 PM: First: Create new GPO. Second: Check settting in Computer condiguration/secirity settings/local policies/security options/Network security: force logoff when logon hours expire. Third: Set the time when users are to be logged off, which I unfortunately can't find where it is... Fourth: Set the policy on the computer OU you want this to apply to. Done. > I'm so poor with GPOs that I can't even find a logon hours entry in there > ;-) > > Everything I find on the web tells me how to enforce user logouts using GPOs > but not how to set the times per machine in the first place. I'm sure it > would be easier if I could just disable the computer accounts from a > scheduled task. > > -----Original Message----- > From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx] > Sent: 28 October 2005 15:14 > To: windows2000@xxxxxxxxxxxxx > Subject: [windows2000] Re: Is it possible to disable a computers domain > account at certain t imes > > > windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28, > 2005 4:03 PM: > >> We want the users to be able to login anywhere else (we're a hospital and >> therefore operate 24/7) but not this specific set of machines. > > Oh, my mistake. > > Anyway, if you set that login hours GPO on the these machines's OU, I > believe that any users will be affected. They should however be able to > login anywhere else. I do believe you can do this, unless I'm gretly > mistaken. > > >> -----Original Message----- >> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx] >> Sent: 28 October 2005 14:51 >> To: windows2000@xxxxxxxxxxxxx >> Subject: [windows2000] Re: Is it possible to disable a computers domain >> account at certain t imes >> >> >> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28, 2005 >> 3:04 PM: >> >> Does it matter if it only works for users, as they won't be able to >> login during certain hours? You'll meet your goal anyway, in preventing >> the use of those computers during certain hours. Or did I miss something >> here? >> >> >>> I thought that was only for users but I've never been very good with >>> GPOs. I'll look into it. >>> >>> -----Original Message----- >>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx] >>> Sent: 28 October 2005 13:46 >>> To: windows2000@xxxxxxxxxxxxx >>> Subject: [windows2000] Re: Is it possible to disable a computers domain >>> account at certain t imes >>> >>> >>> Angus Macdonald <> scribbled on Friday, October 28, 2005 2:40 PM: >>> >>> Why don't you use the logon/logoff-hours GPO? >>> >>> >>>> Once you manage to filter through all the Cybersitter hate sites on >>>> Google, it only seems to protect against internet access. We need to >>>> actually stop anyone logging onto the machines after a certain time. Can >>>> it do that? -----Original Message----- From: Jim Kenzig http://Kenzig.com >>>> [mailto:jkenzig@xxxxxxxxx] Sent: 28 October 2005 13:22 >>>> To: windows2000@xxxxxxxxxxxxx >>>> Subject: [windows2000] Re: Is it possible to disable a computers domain >>>> account at certain t imes >>>> >>>> >>>> Cybersitter lets you schedule when a machine can access the network. >>>> Would this help? >>>> >>>> >>>> Angus Macdonald <Angus.Macdonald@xxxxxxxxxxxxxxxxxxx> wrote: >>>> Our library has a set of teaching machines which should only be used >>>> during office hours. Is it possible to disable the computers domain >>>> account during certain hours, as you can for user accounts? >>>> >>>> Otherwise, is there a tool that can be run at scheduled intervals to >>>> achieve the same thing? Command-line preferably. >>>> >>>> Thanks >>>> Angus > > > ***************************** > New Site from The Kenzig Group! > Windows Vista Links, list options > and info are available at: > http://www.VistaPop.com > ***************************** > To Unsubscribe, set digest or vacation > mode or view archives use the below link. > > http://thethin.net/win2000list.cfm > ***************************** > New Site from The Kenzig Group! > Windows Vista Links, list options > and info are available at: > http://www.VistaPop.com > ***************************** > To Unsubscribe, set digest or vacation > mode or view archives use the below link. > > http://thethin.net/win2000list.cfm ***************************** New Site from The Kenzig Group! Windows Vista Links, list options and info are available at: http://www.VistaPop.com ***************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ***************************** New Site from The Kenzig Group! Windows Vista Links, list options and info are available at: http://www.VistaPop.com ***************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm