Microsoft network server: Disconnect clients when logon hours expireID: oval:org.secpod.oval:def:22836 | Date: (C)2015-01-07 (M)2023-07-31 |
Class: COMPLIANCE | Family: windows |
This policy setting determines whether to disconnect users who are connected to the local computer outside their user account?s valid logon hours. It affects the SMB component. If you enable this policy setting, client sessions with the SMB service will be forcibly disconnected when the client?s logon hours expire. If you disable this policy setting, established client sessions will be maintained after the client?s logon hours expire. If you enable this policy setting you should also enable Network security: Force logoff when logon hours expire.
If your organization configures logon hours for users, it makes sense to enable this policy setting.
This policy setting determines whether to disconnect users who are connected to the local computer outside their user account?s valid logon hours. It affects the SMB component.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options!Microsoft network server: Disconnect clients when logon hours expire
(2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters!enableforcedlogoff
Platform: |
Microsoft Windows Server 2012 R2 |