Rather than setting logon time restrictions on each user account, we would like to apply it via group policy to a security group. Is this possible?
Note that I am asking to set the restriction times in one location for many users, not for the policy setting that enables the enforcement of the restriction times.
Best Answer
I think this is what you need.
This shows how to restrict the hours and days that a user may log on to a Windows Server 2003 domain (can't find the win2k8 at the moment, but it shouldn't be too different)
http://support.microsoft.com/kb/816666
--
Nathan, I'd like to add, you would apply the GPO enforcement per security group. Your security group would contain the computers in a particular location. This would effectively control time restrictions via enforcement on computers in that particular location. You would need to create multiple GPO per location.