Forced Logoff in Active Directory 1

[beammie]

In Active Directory in Windows 2000 Server, how can you disconnect a user's session from the network? Is there a way to do this to one user easily without having to write a script? We would like to do something in Active Directory rather than disconnect their network cable. Immediate Forced Logoff?

Thanks for any help.

 

[Jpoandl]

From the server you can right click MY COMPUTER, then select MANAGE from the drop down list. There is a folder called SESSIONS, you can disconnected users here.

This solution may work if you only have a few servers. I'm not sure if there is a way to kick users on the fly. I will continue looking for this...this is an interesting question and good to know for security reasons.

Maybe someone else will have an idea?

thanks...

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please contact

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[beammie]

Thanks so much for your reply Joseph... I tried this and even though I closed a users session they were still attached to the network.

You would think that this should be a very easy thing to do?

Thanks so much for your reply.

 

[wallst32]

beammie - "disconnection user's session from the network"

Are you referring to Windows network or TCP/IP network?

If Windows network, simply stop the Netlogon service on the client computer. This stops all Windows based authentication. If the user has local admin rights, they can restart the service. And if they do have them, you can just take them away first. The user still has IP connectivity though.

If you mean take away all network access, you should do this on the switch by disabling the port.

 

[Bedpan]

Try this..

psshutdown.exe from Sysinternals. Its free and works great.

Remotely shutdown, reboot, logoff etc.. Or the other ps tools for services process, passwords etc..

Check them out here..

http://www.sysinternals.com/ntw2k/freeware/pstools.shtml