Microsoft network server: Disconnect clients when logon hours expireID: oval:gov.nist.usgcb.windowsseven:def:83 | Date: (C)2012-04-13 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
This security setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component.
When this policy is enabled, it causes client sessions with the SMB Service to be forcibly disconnected when the client's logon hours expire.
If this policy is disabled, an established client session is allowed to be maintained after the client's logon hours have expired.
Default on Windows Vista and above: Enabled.
Default on Windows XP: Disabled
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Disconnect clients when logon hours expire
(2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters!EnableForcedLogOff
Platform: |
Microsoft Windows 7 |