HI. I am not sure if similar post exist b4. So my question is I want to set time or timer that Windows log out after few hours use of PC or set time like no use of pc more than 10 PM With admin access. I know that If I make standard or Kid account may do it. But I want it in admin account with full access because some programs wont run thx
I forget to mention that after log out windows should not allow user to login back until next day thx
I'm not sure because I'm the only one on my computers, but I did find this tutorial by Brink that might be helpful.
Take a read. Just might be something you are looking for.
Family Child - Manage Activity Reporting Settings User Accounts Tutorials
Jack
Open an elevated Command Prompt, following command would allow user JohnDoe to sign in only weekdays between 09:00 and 17:00 (9AM and 5PM):
net user JohnDoe /time:M-F,09-17
All weekdays the same time:
net user JohnDoe /time:M-S,09-17
Time can be given both in 12 and 24 hour formats:
net user JohnDoe /time:M-F,9AM-5PM
Day or day range and time are separated with comma. Time can only be given in full hours (13 or 1PM is OK, 13:15 or 1:15PM not). Days can be given either as full names (Monday, Tuesday etc.) or abbreviations (M,T,W,Th,F,Sa,Su), or combination of these. Days can always be given in English regardless of Windows display language, but localized day names can also be used. For instance in Swedish Windows it's the same if I use Monday - Friday or Måndag - Fredag.
Following command would allow user JohnDoe to sign in only on Mondays and Tuesdays between 09:00 and 17:00 (9AM-5PM), on Wednesdays and Thursdays between 11:00 and 15:00 (11AM-3PM), on Fridays and Saturdays between 08:00 and 14:00 (8AM-2PM), and on Sundays between 16:00 and 22:00 (4PM-10PM):
net user JohnDoe /time:M-T,9-17;W-Th,11-15;F-Sa,8-14;Su,16-22
Semicolon(;) separates days / day ranges.
Reset login access to 24/7:
net user JohnDoe /time:All
Access can be restricted for all standard and admin accounts, be it a local, Microsoft or Azure AD (Work / school) account. Exception: built-in administrator's access can't be restricted. In domain environments restrictions should be done from domain controller.
If user signs in just before end of allowed login time, user can remain signed in as long as PC is not shut down, restarted or user has not signed out. Signing back in is then not allowed, user must wait until start of next allowed login time. If you also want user to be forced to sign out at the end of the allowed time, you can use a scheduled task for it.
Kari
Last edited by Kari; 18 Dec 2017 at 15:48. Reason: Lots of typos!
Anything that you set up, a user who is part of Administrators group can undo. There is a trade off between this (how rigorously you want to enforce hours) and granting them permission to do whatever they want (including bypassing restricted hours).
The problem (perhaps) is if it is an admin account then that user can undo any changes - they could runnet user JohnDoe /time:Allfor example. They would have to signed on and remember to do it before their time was up of course. If they did this the fact would be stored in the event log (unless they cleared the event logs). You could tell they had done something but you can't stop them doing it.
Even if you have some old program that requires administrator privileges you should be able to run it as administrator from a standard account. You can even grant this authority automatically (See here Elevated Program Shortcut - Create for Standard User - Windows 7 Help Forums) but that again lets the user run with Administrator rights if they know what they are doing.
Perhaps you need to look into what programs will not run as a standard user. Which programs do you have a problem with?
The OP's question is an oxymoron: Restricting access for user who has rights to revoke and cancel those restrictions. Instructions in my previous post suit better for restricting access for standard users but as the same commands can be used to restrict admin account's access, the post answers OP's question.
But, as you said, it really is useless because an admin whose access has been restricted can just reset any restrictions next time he / she is allowed to sign in.
Kari
Thanks to all reply guys. Parent control only work with child account not in another admin account. Because some program in child account require admin access and that should not be pop up. Anyway I try it. Thx for info and time
My main reason to limit for my small bro. He play games too much about 5 - 7 hours. So I want to reduce his time. Most games he play requires admin access this is where I having problem. So even I set account as child or standard account those games won’t work which require admin access. Idk what actually I need to do
Quote
