Title

The system will be configured to force users to log off when their allowed logon hours expire. (Cat II impact)

Discussion

This setting controls whether or not users are forced to log off when their allowed logon hours expire. If logon hours are set for users, then this should be enforced.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Network security: Force logoff when logon hours expire” to “Enabled”.

Additional Identifiers

Rule ID: SV-32468r1_rule

Vulnerability ID: V-3380

Group Title: Force Logoff When Logon Hours Expire

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.