How To Restrict Logon Hours In Active Directory

How To Restrict Logon Hours In Active Directory

 

While this is not a task that is performed often – it can provide some benefits to administrators who would like to limit the hours of access to specific Active Directory User Accounts. There is also a way to perform this operation by using Group Policy – but for this scenario we will go through the steps for a single user.

In this scenario – we want to reduce the user accounts access hours to 8am to 8pm.

First thing is first – open Active Directory Users and Computers and navigate to where the user account is located

How To Restrict Logon Hours In Active Directory

Right click the user account you wish to configure, then select the option ‘Properties’

How To Restrict Logon Hours In Active Directory

From the Properties dialog box, select ‘Logon Hours’ which is located just below the user logon name fields

How To Restrict Logon Hours In Active Directory

A window will appear that will show the permitted or denied hours. Permitted is Blue and Denied is White

How To Restrict Logon Hours In Active Directory

Select each box individually or select and drag around the hours you wish to change and then select ‘Logon Denied’. For this scenario we selected from 12AM to 8PM, Su-Sa and from 8PM to 12AM.

How To Restrict Logon Hours In Active Directory

Please follow, like and share Your Digital Mind:

David

I have been in the Information Technology industry for a little over a decade gaining a Bachelors degree in Information System Security and securing employment with various industries including Government, Financial, Healthcare, Corporate and the End User sectors. I started Your Digital Mind in 2016 as a way to share my love for Education, Technology and Science in an entertaining yet rewarding format. I hope you are learning and enjoying!

You May Also Like

Leave a Reply

Your email address will not be published. Required fields are marked *