[windows2000] Re: Is it possible to disable a computers domain account at certain t imes

  • From: "Sorin Srbu" <sorin.srbu@xxxxxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Mon, 31 Oct 2005 08:39:46 +0100

windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
2005 4:52 PM:

> It's the third bit that's tricky. The login hours only seem to be set
for
> the individual user, not for the user on a particular computer.
>
> Anyway, I've found the dsmod command and successfully disabled and
> re-enabled a computer account so I'm happy.

Great. Thx for the hint about dsmod.


> Thanks for the help.
> Angus
>
> -----Original Message-----
> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
> Sent: 28 October 2005 15:47
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Re: Is it possible to disable a computers
domain
> account at certain t imes
>
>
> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
> 2005 4:20 PM:
>
> First: Create new GPO.
>
> Second: Check settting in Computer condiguration/secirity
settings/local
> policies/security options/Network security: force logoff when logon
> hours expire.
>
> Third: Set the time when users are to be logged off, which I
> unfortunately can't find where it is...
>
> Fourth: Set the policy on the computer OU you want this to apply to.
>
> Done.
>
>
>> I'm so poor with GPOs that I can't even find a logon hours entry in
there
>> ;-)
>>
>> Everything I find on the web tells me how to enforce user logouts
using
>> GPOs but not how to set the times per machine in the first place. I'm
sure
>> it would be easier if I could just disable the computer accounts from
a
>> scheduled task.
>>
>> -----Original Message-----
>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
>> Sent: 28 October 2005 15:14
>> To: windows2000@xxxxxxxxxxxxx
>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>> account at certain t imes
>>
>>
>> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
2005
>> 4:03 PM:
>>
>>> We want the users to be able to login anywhere else (we're a
hospital and
>>> therefore operate 24/7) but not this specific set of machines.
>>
>> Oh, my mistake.
>>
>> Anyway, if you set that login hours GPO on the these machines's OU, I
>> believe that any users will be affected. They should however be able
to
>> login anywhere else. I do believe you can do this, unless I'm gretly
>> mistaken.
>>
>>
>>> -----Original Message-----
>>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
>>> Sent: 28 October 2005 14:51
>>> To: windows2000@xxxxxxxxxxxxx
>>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>>> account at certain t imes
>>>
>>>
>>> windows2000-bounce@xxxxxxxxxxxxx <> scribbled on Friday, October 28,
2005
>>> 3:04 PM:
>>>
>>> Does it matter if it only works for users, as they won't be able to
>>> login during certain hours? You'll meet your goal anyway, in
preventing
>>> the use of those computers during certain hours. Or did I miss
something
>>> here?
>>>
>>>
>>>> I thought that was only for users but I've never been very good
with
>>>> GPOs. I'll look into it.
>>>>
>>>> -----Original Message-----
>>>> From: Sorin Srbu [mailto:sorin.srbu@xxxxxxxxxxxxx]
>>>> Sent: 28 October 2005 13:46
>>>> To: windows2000@xxxxxxxxxxxxx
>>>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>>>> account at certain t imes
>>>>
>>>>
>>>> Angus Macdonald <> scribbled on Friday, October 28, 2005 2:40 PM:
>>>>
>>>> Why don't you use the logon/logoff-hours GPO?
>>>>
>>>>
>>>>> Once you manage to filter through all the Cybersitter hate sites
on
>>>>> Google, it only seems to protect against internet access. We need
to
>>>>> actually stop anyone logging onto the machines after a certain
time. Can
>>>>> it do that? -----Original Message----- From: Jim Kenzig
>>>>> http://Kenzig.com [mailto:jkenzig@xxxxxxxxx] Sent: 28 October 2005
13:22
>>>>> To: windows2000@xxxxxxxxxxxxx
>>>>> Subject: [windows2000] Re: Is it possible to disable a computers
domain
>>>>> account at certain t imes
>>>>>
>>>>>
>>>>> Cybersitter lets you schedule when a machine can access the
network.
>>>>> Would this help?
>>>>>
>>>>>
>>>>> Angus Macdonald <Angus.Macdonald@xxxxxxxxxxxxxxxxxxx> wrote:
>>>>> Our library has a set of teaching machines which should only be
used
>>>>> during office hours. Is it possible to disable the computers
domain
>>>>> account during certain hours, as you can for user accounts?
>>>>>
>>>>> Otherwise, is there a tool that can be run at scheduled intervals
to
>>>>> achieve the same thing? Command-line preferably.
>>>>>
>>>>> Thanks
>>>>> Angus


*****************************
New Site from The Kenzig Group!
Windows Vista Links, list options 
and info are available at:
http://www.VistaPop.com
***************************** 
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: