In Active Directory si you want to prevent a user depuis logging in you can soit désactivez leir account ou simply redéfinissez leir password. Cependant, si you have a user who is déjà logged in to a workstation et you need to prevent them depuis accessing tout resources as quickly as possible - how do you do it? I speak of an emergency situation in qui a worker is fired avec immediate effect et there is risk of them wreaking havoc si they are pas locked out of le network immediately.
A peu de days ago J'ai been faced avec a similaire case. At premier J'étais pas sure how to act. Preventing user access to network shares is easy mais this is pas enough. Eventually, I switched le target computer off avec le Stop-Computer -ComputerName <name> -Force PowerShell cmdlet et in mon case this solved le issue. Cependant, dans certains cas this might pas be le best choice, say si le user you need to cut off is logged in on plusieurs workstations ou on a computer qui provides an important service et you juste cannot switch it off.
What is le best possible solution to remotely force an immediate user logoff depuis tous workstations? Is this even possible in Active Directory?
