Enforce Logon Time Restrictions Using Group Policy in Server

To do that we need to go back to “Group Policy Management” window. This group policy can created from child domain server also. But I have chosen the same window I used from primary domain controller. From the window select the domain “sales.sprint.local” and create new GPO with name “Log on Time Restrictions”.

Right Click on it and then select “Edit” to go in to policy editing window.

Then move to Computer configurations > Policies > Windows Settings > Security Settings > Local Policies > Security Options

In the right pane of the Group Policy snap-in, double-click Microsoft network server: Disconnect clients when logon hours expire. 

Click to select the Define this policy setting check box, click Enabled, and then click OK.

This is done now, so using this GPO we can enforce to disconnect clients when login hour expired if there were active sessions running.