Logon status and force disonnect

Windows 2003 Server, Active Directory.

How to find out who and when logon/logout from AD?
How to force disconnect a user from AD?

Hi 2Sweet

You can check administrative tools->event viewer->security
for successful logon an logoff audits

What do you mean about disconnecting a user ?

Have a nice day
Best Regards
Baris DOGAN
MCT ,CCNA, MCSE 2K/2K3 + Security


"2Sweet" wrote:

> Windows 2003 Server, Active Directory.
>
> How to find out who and when logon/logout from AD?
> How to force disconnect a user from AD?
> .
>

The link below covers 2000/2003 on what you should look for
http://technet.microsoft.com/en-us/l.../bb742436.aspx

You can't disconnect a user who has logged on, since this is Kerberos and it
doesn't keep a connected session but instead uses tokens. I would suggest
you disbale the user account and then force a reboot on the user you need to
disconnect.

To reboot a remote use use the command shutdown from a command prompt. Make
sure you understand the switches before you run it, otherwise you may
shutdown your local machine.

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"2Sweet" <> wrote in message
news:...
> Windows 2003 Server, Active Directory.
>
> How to find out who and when logon/logout from AD?
> How to force disconnect a user from AD?

You can force disconnect a user from the domain using GPO

First you have to set it in account property - logon schedule
Next, using GPO : Network security: Force logoff when logon hours expire
(this is under Computer Configuration/ Windows Settings/ Security Settings
/Local Policies/Security Options.


Regards

"2Sweet" wrote:

> Windows 2003 Server, Active Directory.
>
> How to find out who and when logon/logout from AD?
> How to force disconnect a user from AD?
> .
>

Hi Baris


I strongly Agree with that
but you have first to ensure that its enabled trough GPO !
this is done through :
Cmputer configuration/windows settings/security settings/local
policies/audit policies/audit account logon events.

rgrds

"Baris DOGAN" wrote:

> Hi 2Sweet
>
> You can check administrative tools->event viewer->security
> for successful logon an logoff audits
>
> What do you mean about disconnecting a user ?
>
> Have a nice day
> Best Regards
> Baris DOGAN
> MCT ,CCNA, MCSE 2K/2K3 + Security
>
>
> "2Sweet" wrote:
>
> > Windows 2003 Server, Active Directory.
> >
> > How to find out who and when logon/logout from AD?
> > How to force disconnect a user from AD?
> > .
> >