Limit application access outside of office hours

[driesbessels]

A lot of our employees have laptops and they can do almost everything they need to do, regardless of location.

However, we have a few pretty sensitive applications that should not be accessible to the general public outside of office hours. I say general public since they have to be accessible 24/7 by a few DBA's and Sysadmins.

 

So: the bulk of the applications should be accessible all the time and everywhere.

A few of the applications only in office hours for everybody. The same few applications accessible 24/7 for a few people.

 

Is there a way to set something like this in AD? I know you can limit login hours but that is not what we need.

 

thanks

Dries

[dubsdj]

Maybe a scheduled script that renames the application.exe during out of hours and then renames it back to its original name during working hours (After you have backed up the exe and assuming the application is on a server and not installed on each laptop).

 

Or a script that deletes the shortcut if its on a shared location and then re-adds the shortcut.

Edited July 24, 2020 by dubsdj

[3s-gtech]

You can script a change of ACLs, run via a scheduled task. That’s how I’d do it.

 

Then have some security groups that hold the users that you want to affect.

 

Super simple and reliable, and wouldn’t affect users you don’t want it to.