I have enabled a GPO for computers that is applying
several settings on the computer that are working fine. I
enabled the "automatically log off users when login time
expires" under computer configuration, security settings,
security options, and I set the logon time for the user.
The logon time is working since I can't log into the
computer after the specified time, however it won't log
them off if they are already logged in. Apparently lots
of people have had this problem but I don't see a solution
to it. When I issue the "net accounts" command I get
various results depending on the user but if I run "net
accounts \forcelogoff:10" it will set it to 10 min. but
still won't log them off.... Argh.. Novell had this
feature years ago along with limiting the concurrent
logins which 2000 doesen't support at all without some
goofy resource kit add on. Anyway does anyone know how to
force users to log off after the login time has expired.
The servers are ADS and the workstations are Windows XP.