How can I set up a group policy on a domain to log off a user at a certain time? I need my backups to run at 10, but I need all of the computers logged off at 9. I have set the log on hours, what else can I do?

Just for your information, if you would like to schedule a log off time, you can also create a TXT document with the following content. Name it logoff.bat and then create a Schedule Task to run it:

C:\Windows\system32\shutdown.exe –l –f

How To Schedule Tasks in Windows XP

How To Schedule Tasks in Windows XP

I know about the script, but my boss was wanting me to implement a group policy on the DC that would log users off at a certain time. Right now, I have a script on the DC to restart all of the computers.

I know you can restrict logons to a certain time frame. I'm not sure, however, if when the time frame elapses, it will log the user off.

This would take 2 steps.

First, set the hours the account is allowed to be logged in, under the user account in active directory. You can find it under the Logon Hours button.

Then to enforce these hours, you have to set up group policy. It's under Computer Settings/Security Settings/Local Policies/Security Options/Network Security: Force Logoff When Logon Hours Expire

I tried that and it only disconnects them from network resources. It does not log them off the computer.

Tried, which? My suggestion or Chris's?

Do you only need everyone logged off so that you can run the backups? If so, that will close all the open network handles, and all the files will be ready for backup.

If you actually need the machines to log off, you could try ITHELPP's suggestion with a batch file, or you could try the winexit.scr method Microsoft suggests for logging off an idle user... just Google winexit.scr for more info on that.

Like I said before, I do have a .bat file on the server and scheduled for a daily task. It reboots all computers. I just wish there was a group policy that would log them off at a certain time.