Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Rather than setting logon time restrictions on each user account, we would like to apply it via group policy to a security group. Is this possible?

Note that I am asking to set the restriction times in one location for many users, not for the policy setting that enables the enforcement of the restriction times.

share|improve this question
add comment

3 Answers

I'm not aware of a native method to do so. I wrote a package a few years ago that includes a script to so however.

share|improve this answer
add comment

I think this is what you need.

This shows how to restrict the hours and days that a user may log on to a Windows Server 2003 domain (can't find the win2k8 at the moment, but it shouldn't be too different)

http://support.microsoft.com/kb/816666

--

Nathan, I'd like to add, you would apply the GPO enforcement per security group. Your security group would contain the computers in a particular location. This would effectively control time restrictions via enforcement on computers in that particular location. You would need to create multiple GPO per location.

share|improve this answer
    
I've added some clarification to my question. That article does not say how to set the time in one location for a group of users. –  Nathan Hartley Jan 12 '12 at 18:27
add comment

This is simple via GPO. In Server 2003 it was simple as noted by @ColdT. I do not have a 2008 system in front of me but should be similar

This articleLogon Options can help.

share|improve this answer
    
I've added some clarification to my question. That article does not say how to set the time in one location for a group of users. –  Nathan Hartley Jan 12 '12 at 18:28
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.