I haave a win2k network in native mode running AD, it is
basically a lab with fresh installs of win2k server and
win2k pro with the latest sp2 and all hotfixes
created a couple accounts that belong to the domain users
group with logon hours specified, all the rest is default
when the account was created
I defined for the default domain policy to "Automatically
log off users when log on time expires" set to enable.
When a user has surpassed the logon time they are not
automatically logged off, as I would expect. If the user
log's off and tries to log back in, the user is denied.
However it doesn't automatically log off users when the
logon time expires. I remember this worked fine in NT.