Home / server / Questions / 349321
In Process
Nathan Hartley
Asked: 2012-01-13 07:52:44 +0800 CST

Is there a way to set logon time restrictions via group policy?

  • 772

Rather than setting logon time restrictions on each user account, we would like to apply it via group policy to a security group. Is this possible?

Note that I am asking to set the restriction times in one location for many users, not for the policy setting that enables the enforcement of the restriction times.

windows windows-server-2008 group-policy

3 Answers

  1. I think this is what you need.

    This shows how to restrict the hours and days that a user may log on to a Windows Server 2003 domain (can't find the win2k8 at the moment, but it shouldn't be too different)

    http://support.microsoft.com/kb/816666

    --

    Nathan, I'd like to add, you would apply the GPO enforcement per security group. Your security group would contain the computers in a particular location. This would effectively control time restrictions via enforcement on computers in that particular location. You would need to create multiple GPO per location.

    • 2

  2. I'm not aware of a native method to do so. I wrote a package a few years ago that includes a script to so however.

    • 0

  3. This is simple via GPO. In Server 2003 it was simple as noted by @ColdT. I do not have a 2008 system in front of me but should be similar

    This articleLogon Options can help.

    • 0