You mean force a logoff of the computer account, or forcefully terminate the
user's session?
I don't know how to force a logoff of the computer account. But, if the goal
is to keep users from using the computers locally as well as to keep them off
the server, then just:
1. set up the network allowed login hours as normal
2. For XP/2k/NT clients, remove all of the local users on each workstation
(except admin and guest, and make sure the guest is disabled and admin has a
nice strong secret password). This will force users to log into the network
to get access to anything.
3. For 9x clients, there is a policy setting that forces them to
authenticate to the domain before allowing anyone into anything. Of course,
it's 9x, so there's many relatively easy ways around this, but, hey, you have
to start somewhere
-bruce d
