How to Set Time-Based Access Restrictions for Users on a Windows Device Using SureMDM

Contents

In many organizations, there are times when users require access to Windows devices only during specific time frames. Setting time-based restrictions on user access helps keep things more secure. SureMDM has now introduced a new feature that allows administrators to create user accounts with restricted logon hours, thereby ensuring that users can only log in during approved times and automatically preventing access outside those hours.

Purpose:

This article guides you through the steps to create a new user account on a Windows device and configure it with time-based access control using the User Account Management feature available on SureMDM Console.

Pre-requisite:

The devices should be enrolled in the SureMDM Console.
Specify when user access to the device begins/ends.
When creating Time-based access for newly created users, choose an hour ahead of their creation time for optimal working conditions.

STEPS:

Step 1: How to create a user with time base access control

1.Login to the SureMDM Console.

2.Navigate to Jobs > New Job > Windows > User Account Management.

3.Give the job a name and choose the Action Type as “Create User”.

4.Make the necessary configurations and scroll down to find the option “Time Based Access Control” and enable the same.

5.Once the configurations are made, save the job and apply it on the Windows devices.

6.On the device end, this job would create a new user with Time Based Access Control policy enabled.

Note:
The users will be able to login only during the hours that have been mentioned in the Job.
Logon hours specified in the time-based access control adhere to the device’s local time and Logon attempts during an unspecified schedule will be restricted.

Step 2: How to create Time Based Access Control for existing users

1.Navigate to Jobs > New Job > Windows > User Account Management, give the job a name and choose the Action Type as “Time-Based Access Control”.

2.Enter the Username and configure the Logon Start and End time > click on Save.

NOTE: Admin can even schedule the Access.

3.On the device end, this job would create a Time Based Access Control for already existing users.

4.Similarly, the Time Based Access control user management can be created for new users at the time of creation of the user account. The sample configurations would be as below:

Navigate to Jobs > New Jobs > Windows > User Account Management. Under this job, make the below configurations
Enter the following details: Job Name, Action Type → Create User, Username, Password, Confirm Password, Time Based Access Control to be enabled and configure the Logon Start and End time > click on Save.