在 C# .NET 中扩展 Active Directory 功能？
在具有多个 Windows 7 客户端和单个 Active Directory（服务器 2008）计算机的平面 LAN 上，我需要确保给定的 AD 用户每天只能登录指定的分钟数，在此限制下强制退出，第二天才能重新登录。
由于缺乏执行此操作的内置工具，我想知道 .NET 中是否可以提供定制解决方案。任何关于从哪里开始的指示将非常感激。谢谢大家！
On a flat LAN with multiple Windows 7 clients and a single Active Directory (server 2008) machine, I have a requirement to ensure that given AD users can only log on for a specified number of minutes every day, at the limit of which they are forcibly logged out, and cannot log back in until the next day.
In the absence of the built in facility to do this, I had wondered whether a bespoke solution might be possible in .NET. Any pointers as to where to begin with this would be very much appreciated. Thank you all!
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
是的同意@marc_s，您可以使用“lastlogontimestamp”等现有属性来查找上次使用用户名的时间，但基于服务的方法更好，它将在该框上运行并检查用户登录和登录的时间他出去。
或者您可能会幸运地探索策略，您可以在其中指定 maxUsage。我认为在“家长控制”政策中，您可以设置帐户在给定时间段内可以使用的最长时间。 （我想我在Windows 7中见过它）
yeah agree with @marc_s, you could use existing properties like "lastlogontimestamp" to find out when last time username was used, but Service based approach is better, which will run on that box and check how long the user has been logged in and log him out.
Or you might be lucky with exploring Policies, where you might be able to specify maxUsage. I think in "Parental Control" policies somewhere you can set maximum time account can be used for given period. (i think I have seen it in Windows 7)