Set Login Times

• 1). Log into the system as an administrator.
  
  
• 2). Click "Start," "Programs," "Administrative Tools," "Active Directory Users and Computers." A console will open.
  
  
• 3). Locate the account you wish to modify by expanding the corresponding container on the tree-directory on the left pane.
  
  
• 4). Right-click the user account. Choose "Properties" from the drop-down menu.
  
  
• 5). Select the "Account" and "Logon Hours." A calendar matrix displays a column with the days of the week and a row with all possible hours for each day.
  
  
• 6). Click the blank button on top of "Sunday" to select all the hours in the calendar matrix. Click "Logon Denied" or "Disallow."
  
  
• 7). Select permitted log-in times. Choose the "Logon Permitted" or "Allowed" option. Click "OK" to confirm changes. Close the "Active Directory Users and Computers" console and restart the system.
  
  

Enforce Logon Hours

• 1). Log into the system with an administrator account
  
  
• 2). Launch the Group Policy Editor utility. Click "Start." Type "gpedit.msc" in the "Start Search" field. Press "Enter."
  
  
• 3). Expand "User Configuration," "Windows Settings," "Security Settings," "Local Policies" and click the "Security Options" sub-folder.
  
  
• 4). Double-click one of the following settings, on the right pane, under the "Setting" column: "Automatically log off users when logon time expires" or "Network security: Force logoff when logon hours expire." A "Properties" window will open.
  
  
• 5). Choose the "Define this policy setting" option and click "Enabled." Click "Apply," "OK." Close the Group Policy Editor and restart the system.