This security setting determines whether to disconnect users who are connected to the local computer outside their user accounts valid logon hours. This setting affects the Server Message Block (SMB) component. When this policy is enabled, it causes client sessions with the SMB Service to be forcibly disconnected when the clients logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the clients logon hours have expired. Default on Windows Vista and above: Enabled. Default on Windows XP: Disabled Counter Measure: Enable the Microsoft network server: Disconnect clients when logon hours expire setting. Potential Impact: If logon hours are not used in your organization, this policy setting will have no impact. If logon hours are used, existing user sessions will be forcibly terminated when their logon hours expire. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Disconnect clients when logon hours expire (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters!enableforcedlogoff