wehuberconsultingllc.com

wehuberconsultingllc.com random header image

Oops! I do know enough about Active Directory to turn off my son’s PC at 11pm

February 15th, 2005 · 1 Comment · SBS2K-SBS2K3

Okay, here’s the problem. My son likes to play games on PC to excess. I asked him several times to restrict his game playing since he was avoiding homework and the late nights are disrupting his sleep time. He got a detention for falling asleep in French. He gave me his word that he would fix his problem. I reminded him that if he could not exhibit the discipline required to fix this problem that I would help him. Since he is running W2K and is using a login for our local SBS network I could enforce logoff times for school nights. He thinks he is pretty smart about computers but he did not see that one coming. Heh! Heh! My son has always been pretty smart about the boundaries I set up for him and my willingness to enforce boundaries. Now we can move on to other problems.

Related posts:

Related posts brought to you by Yet Another Related Posts Plugin.

Tags:

1 response so far ↓

  • 1 wehuberconsultingllc.com » Blog Archive » Forcing Logoff // Nov 8, 2005 at 12:34 pm

    [...] In a previous post I thought I had arranged the system to force my son off the computer at 11 o’clock. The problem was that he was playing video games and not doing his homework. Being a smart kid he figured out that he could change the time or time zone and continue to play. I vowed to get back to this problem when I had more time. Today was the day I think I finally fixed his wagon. I got lured into researching this problem when I noticed about twenty audit failures with an ID of 537 in the daily log. A little research showed that my son’s PC was causing the problems. The reason was due to a lack of time synchronization between the domain controller and the workstation. He was changing the time and the workstation’s time was wrong. So I did a little more research and found out I could assign the privelege of changing system time(Windows Settings-Security Settings-Local Policies-User Rights Assignment). To make this work I used the Domain Admins group rather than the Adminstrators group. My son was a member of the Administrators group on his local workstation. To reinforce my point to my son, I modified the GPO to force logoff when his logon time expires. There are still several easy ways to get around these restrictions, such as, playing the games on his laptop but this has its risks and downfalls, too. At least once a quarter he has to get his laptop rebuilt since his laptop has gotten completely mucked up. All of the non-school stuff disappears. My hope is that he will decide that trying to get around these boundaries is too much like work. [...]

Leave a Comment