Force user to log off client after a set time.

Hi, I've enable these settings in Active Directory hoping to force users to log off after a certain time but it does not seem to be working. Is there other places in AD that needs to be set? All other GPO works fine.

Computer Conf/Wins Settings/Security Settings/Local Policies/Security Options:
- Auto log off users when logon time expirers
- Auto log off users when logon time expirere (local)

On the user profile configurations, I've set the times to from 8-4pm. Anytime other then the set time these users can not log in (perfect). The only problem is when they are log on, it doe not force them to log off.

One more thing to this, if this configuration is possible does it prompt the user before logging off? For example: "You system will be shutting down in 5 mins" Just wondering in case they have to save their work before it logs them off.

I would appreciate any advice.

Thanks

Check this out!

http://www.ms-mvps.com/server/autologoff.htm

Thanks, what exactly does that batch file do? It looks like it stop and start the server. That would be something I rather not do, if that's the case.
Anyway, I tried it out and it did not work.

Any other advice?

Thanks.

The Group Policy that you mentioned does not do what you think it will do. If I am not mistaken it will disconnect the user from any network resources they may be connected to but will not log them off. Try this

http://support.microsoft.com/kb/314999

No real clear answers to this that I could easily find. However, this is probably about as close as it gets.

http://www.jsifaq.com/SF/Tips/Tip.aspx?id=8526

Thanks for all replies. I'll try both links.

The first link I wasn't about to find winexit.scr for my 2000 server but i'll download the 2003 server rsktool.exe and see if that works.

The second link. I'm not good with scripts at all so when reading that info and script I was totally lost. I copy and past the script in notepad as a .bat and ran it but it did not seem to work. After reading it a few times over again, it says it must be in the same path. Now that totally confuse me. I'm not sure where to begin then. Any ideas exactly how this needs to be done?