Accounts without time restrictions (Windows)

Module: Account Integrity

Supported Platforms: Windows 2000, Windows 2003, Windows 2008

This check reports domain accounts that do not have time restrictions limiting when the account can be used. You can use the name list to exclude accounts that are not excluded by the Users to check option. Because time restrictions apply only to domain accounts, this check does not provide any information unless it is run on a domain controller.

The following table lists the error message for the check.

Table: Error message for Accounts without time restrictions

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_NO_TIME_RESTRICTIONS

Category: Policy Compliance

  • Windows 2000 (105910)

  • Windows 2003 (205910)

  • Windows 2008 (248910)

Title: No account time restrictions

Description:The account does not have time restrictions to limit its use during the week. Accounts without time restrictions can be used to break into the system after business hours. Limit access for these accounts to normal business hours unless authorized users need the additional access time.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [Full/display name: %s]