Information
This policy setting determines whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setting affects the Server Message Block (SMB) component. If you enable this policy setting you should also enable
Microsoft network server: Disconnect clients when logon hours expire
(Rule 2.3.9.4).
The recommended state for this setting is: Enabled
If this setting is disabled, a user could remain connected to the computer outside of their allotted logon hours.
Solution
To establish the recommended configuration via GP, set the following UI path to Enabled
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Network security: Force logoff when logon hours expire
Impact:
None - this is the default behavior.