One gotcha I have encountered was wrong permissions of the specific folder the GPO has to access to save the change. It was after a restore ,though. Check the event viewer on the DCs. ________________________________ From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sorin Srbu Sent: Friday, January 13, 2006 9:34 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: GPO to Logoff user once logon time expires Not really. 8-) It should be working. Anything else? Well... Take either a 15min coffee-break and see if things will have solved itself or not. Amazingly many problems go away after about 15min and you don't do anything on the matter. Another thing to try is to just let it be overnight, in case it's a replication issue from DC to client. Sometimes it helps to enable the "forced" setting on a GPO. The suggestions are highly irregular and non-documented, but they seem to work most of the time for particular reason. You mean to say you haven't used them at some point or other? -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Dave stevens Sent: Friday, January 13, 2006 3:26 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: GPO to Logoff user once logon time expires Yes Sorin, I have run gpupdate /force on the client. It also says the policy is applied when I do GPResult /Scope "computer" What would you like to know about the DC's? I do have other GPO's running ok. The local client policy - windows setting - security settings - local policies - security options - network security: Force logoff when logon hours expires - enabled. Is there something else Ishould be doing? Thanks Dave Sorin Srbu <sorin.srbu@xxxxxxxxxxxxx> wrote: It should (it being a relative term) work. Did you run gpupdate /force on the client? Any firewalls between? C an you tell us a but about the DCs etc? -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Dave stevens Sent: Friday, January 13, 2006 2:35 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: GPO to Logoff user once logon time expires I have done that, but it does not seem to work. Are my missing something or does the feature not work with XP? Thanks Dave Sorin Srbu <sorin.srbu@xxxxxxxxxxxxx> wrote: I'd rather set it to the OU where the computer or user is, this policy should have an effect on. If you put it in the default domain policy, this policy will take effect on *all* computer/users, including you. 8-) -----Origi nal Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Dave stevens Sent: Friday, January 13, 2006 1:41 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: GPO to Logoff user once logon time expires Hi guys, Just to add, should this GPO be applied to the default domain policy? does it make a difference? Ta Dave Dave stevens <london31uk@xxxxxxxxx> wrote: Hi Guys, I have tried set GPO to logoff users once logon time expires. Domain is windows 2000, client is XP sp2. Somehow I can not get this to work even tho GPResult says the policy is applied. Once logon time expires, user is not logged off. Any Hints? ________________________________ Yahoo! Photos - Showcase holiday pictures in hardcover Photo Books <http://us.rd.yahoo.com/mail_us/taglines/photobooks/*http:/pa.yahoo.com/ *http:/us.rd.yahoo.com/mail_us/taglines/photos/evt=38088/*http:/pg.photo s.yahoo.com/ph/page?.file=photobook_splash.html> . You design it and we'll bind it!