[windows2000] Re: Is it possible to disable a computers domai n account at certain t imes

  • From: Angus Macdonald <Angus.Macdonald@xxxxxxxxxxxxxxxxxxx>
  • To: windows2000@xxxxxxxxxxxxx
  • Date: Fri, 28 Oct 2005 15:52:22 +0100

It's the third bit that's tricky. The login hours only seem to be set for
the individual user, not for the user on a particular computer.

Anyway, I've found the dsmod command and successfully disabled and
re-enabled a computer account so I'm happy.

Thanks for the help.
Angus

-----Original Message-----
From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
Sent: 28 October 2005 15:47
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: Is it possible to disable a computers domain
account at certain t imes


windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
2005 4:20 PM:

First: Create new GPO.

Second: Check settting in Computer condiguration/secirity settings/local
policies/security options/Network security: force logoff when logon
hours expire.

Third: Set the time when users are to be logged off, which I
unfortunately can't find where it is...

Fourth: Set the policy on the computer OU you want this to apply to.

Done.


> I'm so poor with GPOs that I can't even find a logon hours entry in
there
> ;-)
>
> Everything I find on the web tells me how to enforce user logouts
using GPOs
> but not how to set the times per machine in the first place. I'm sure
it
> would be easier if I could just disable the computer accounts from a
> scheduled task.
>
> -----Original Message-----
> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
> Sent: 28 October 2005 15:14
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Re: Is it possible to disable a computers
domain
> account at certain t imes
>
>
> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
> 2005 4:03 PM:
>
>> We want the users to be able to login anywhere else (we're a hospital
and
>> therefore operate 24/7) but not this specific set of machines.
>
> Oh, my mistake.
>
> Anyway, if you set that login hours GPO on the these machines's OU, I
> believe that any users will be affected. They should however be able
to
> login anywhere else. I do believe you can do this, unless I'm gretly
> mistaken.
>
>
>> -----Original Message-----
>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
>> Sent: 28 October 2005 14:51
>> To: windows2000@xxxxxxxxxxxxx
>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>> account at certain t imes
>>
>>
>> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
2005
>> 3:04 PM:
>>
>> Does it matter if it only works for users, as they won't be able to
>> login during certain hours? You'll meet your goal anyway, in
preventing
>> the use of those computers during certain hours. Or did I miss
something
>> here?
>>
>>
>>> I thought that was only for users but I've never been very good with
>>> GPOs. I'll look into it.
>>>
>>> -----Original Message-----
>>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
>>> Sent: 28 October 2005 13:46
>>> To: windows2000@xxxxxxxxxxxxx
>>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>>> account at certain t imes
>>>
>>>
>>> Angus Macdonald <> scribbled on Friday, October 28, 2005 2:40 PM:
>>>
>>> Why don't you use the logon/logoff-hours GPO?
>>>
>>>
>>>> Once you manage to filter through all the Cybersitter hate sites on
>>>> Google, it only seems to protect against internet access. We need
to
>>>> actually stop anyone logging onto the machines after a certain
time. Can
>>>> it do that? -----Original Message----- From: Jim Kenzig
http://Kenzig.com
>>>> [mailto:jkenzig@xxxxxxxxx] Sent: 28 October 2005 13:22
>>>> To: windows2000@xxxxxxxxxxxxx
>>>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>>>> account at certain t imes
>>>>
>>>>
>>>> Cybersitter lets you schedule when a machine can access the
network.
>>>> Would this help?
>>>>
>>>>
>>>> Angus Macdonald <Angus.Macdonald@xxxxxxxxxxxxxxxxxxx> wrote:
>>>> Our library has a set of teaching machines which should only be
used
>>>> during office hours. Is it possible to disable the computers domain
>>>> account during certain hours, as you can for user accounts?
>>>>
>>>> Otherwise, is there a tool that can be run at scheduled intervals
to
>>>> achieve the same thing? Command-line preferably.
>>>>
>>>> Thanks
>>>> Angus
>
>
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net/win2000list.cfm
> *****************************
> New Site from The Kenzig Group!
> Windows Vista Links, list options
> and info are available at:
> http://www.VistaPop.com
> *****************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>
> http://thethin.net/win2000list.cfm


*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: