AD logon hour restrictions are pretty much an all or nothing solution. What if the users were allowed to log onto the network from some machines - say "classrooms" or "laptops" - but not from others, like "Labs"?
A scripted solution would allow a lot of flexibility.. you could even apply "points" based on various tests. Get enough points, you can log on. Logging on to your primary station grants you a million points, effectively negating any restriction.
Glenn
_________________________
Actually I
am a Rocket Scientist!
