How To Restrict Logon Hours In Active Directory
While this is not a task that is performed often – it can provide some benefits to administrators who would like to limit the hours of access to specific Active Directory User Accounts. There is also a way to perform this operation by using Group Policy – but for this scenario we will go through the steps for a single user.
In this scenario – we want to reduce the user accounts access hours to 8am to 8pm.
First thing is first – open Active Directory Users and Computers and navigate to where the user account is located
Right click the user account you wish to configure, then select the option ‘Properties’
From the Properties dialog box, select ‘Logon Hours’ which is located just below the user logon name fields
A window will appear that will show the permitted or denied hours. Permitted is Blue and Denied is White
Select each box individually or select and drag around the hours you wish to change and then select ‘Logon Denied’. For this scenario we selected from 12AM to 8PM, Su-Sa and from 8PM to 12AM.