MMC in Win2K

[fyxxer32]

I want to restrict times as in between certain hours of the day to a Win2K OS pc . A friend said I could do it thru MMC which I guess is MS management console so I typed mmc in the run box ,looked at it , looked thru help AND STILL HAVE NO CLUE!DUH! Any good links out there on how to use it? Or something?

i believe to access mmc to limit times deals with domain account with the accounts logging into Advance server.

[Agent_Embryo]

when you run mmc from the run box you only get an empty console. from the menu you can select add/remove snap-ins ...you open that and add >> Group Policy

In there somwhere you can set those details...not sure where tho. You have to set a policy for a group that has the users as members.

[DVNT1]

Within the MMC add the Group Policy Snapin, choose Local Policy, then go to Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options, Automatically Log off users when logon time expires, choose to define this policy then choose enable.

Then go the user account and look at the Account tab and you should find the logon time settings there.

[fyxxer32]

Ok ,I have gotten this far,
Within the MMC add the Group Policy Snapin, choose Local Policy, then go to Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options, Automatically Log off users when logon time expires, choose to define this policy then choose enable.

But as far as the next part I am cofused,go to the user account where,in mmc? I dont see anything that says user account.

[DVNT1]

Sorry, the user part wasn't within this MMC/snapin you are already in. Right click the My Computer icon and choose Manage. Then go to the Users area to do the rest.

[fyxxer32]

When I go to "user" there is not a tab to set logon/logoff times. What have I missed? I was in "My Computer " /manage

Oh I was in "My Computer" on the desktop ,was that right or "my Computer " in mmc? Or is there "My Computer " in mmc . I'm not at that pc right now.

[shigum]

You can't restrict logon hours on a local machine. That can only be enforced in a Win2k domain. In a domain, every user account has a logon hours button to define restrictions, and that's not present for your local users.

[DVNT1]

I looked at it this morning and shigum's right, Local Users don't have the settings even though GP settings are there.

You have to have a domain, and then the domain users can be restricted by logon time.

[fyxxer32]

So what shall be my next step.............? Create a domain? How do I do that?