Reading Time: 2 minutes

How To Restrict Logon Hours In Active Directory

 

While this is not a task that is performed often – it can provide some benefits to administrators who would like to limit the hours of access to specific Active Directory User Accounts. There is also a way to perform this operation by using Group Policy – but for this scenario we will go through the steps for a single user.

In this scenario – we want to reduce the user accounts access hours to 8am to 8pm.

First thing is first – open Active Directory Users and Computers and navigate to where the user account is located

How To Restrict Logon Hours In Active Directory

Right click the user account you wish to configure, then select the option ‘Properties’

How To Restrict Logon Hours In Active Directory

From the Properties dialog box, select ‘Logon Hours’ which is located just below the user logon name fields

How To Restrict Logon Hours In Active Directory

A window will appear that will show the permitted or denied hours. Permitted is Blue and Denied is White

How To Restrict Logon Hours In Active Directory

Select each box individually or select and drag around the hours you wish to change and then select ‘Logon Denied’. For this scenario we selected from 12AM to 8PM, Su-Sa and from 8PM to 12AM.

How To Restrict Logon Hours In Active Directory

Leave a Reply

Your email address will not be published. Required fields are marked *