I remember seeing a script that you could run to do one of two things, if someone was logged in on one workstation, it would enforce not allowing that person to have multiple network sessions. It would log off someone or not allow them to log onto the workstation if they were logged into other workstations. It is a little difficult to do that sort of thing in AD because of the architecture used for authentication. I believe Novel has better command of this situation because they keep constant communication channels open with the licensing services and the directory. I believe the author of the Microsoft code was from a PSS engineer named Amir Litman, and it is either on Microsoft's website, or Windows NT Magazine.
The Toddler -----Original Message----- From: Tony Murray [mailto:[EMAIL PROTECTED] Sent: Sunday, August 03, 2003 11:26 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Force user logoff The GPO is not very well named. Enabling the GPO setting does not actually perform a log off as such. Instead it disconnects the client session with the Server Message Block (SMB) component of the Windows 2000 server. In other words, it's more of a disconnect than a log off. More info on this here: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/566. asp Tony -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charles Campbell Sent: Sunday, August 03, 2003 3:57 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Force user logoff In my GPO, I enabled the following policies: 'Automatically logoff users when logon time expires' 'Automatically logoff users when logon time expires (local)' Under AD, all accounts are restricted from logging on between the hours of 12AM and 1AM (when I have backups running for all my workstations) However, the users are not logged off when their supposed to be. Doing some searching on technet, and google, I have found no real answer to the problem. If I do a 'net accounts' from the command prompt, I see 'Force user logoff how long after time expires: 0' Has anyone run across a solution for this? TIA Charles List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
