When you enforce logon hours restrictions by using to Group Policy to navigating to Computer Configuration \ Windows Settings \ Security Settings \ Local Policies \ Security Options and enable Automatically log off users when logon time expires, users whose logon times settings prevent logon at this time are NOT permitted to log on. However, users who are logged on and should be logged off are not?
If this happens in your domain, try the following:
1. Open a CMD prompt.
2. Type:
net accounts /forcelogoff:<minutes> /domain
where <minutes> is the number of minutes after the log on time expires that a user will be forced off. The user will receive a warning message <minutes> before the forced log off.
NOTE: The default setting for the /forcelogoff switch is no. When no is set, forced logoff is prevented. To see the current setting, open a CMD prompt and type net accounts. If this returns:
Force user logoff how long after time expires?: Never
then forced logoff is prevented. I would NOT set <minutes> to 0.
