Temporary deny use of windows share

Question

I would like to know if it is possible to temporary deny access to windows share folders for a specific user at a specific time range?

Example: Deny access to user User1 for folder WolfyShare from 23:00 to 12:00 or Allow access to user User1 for folder WolfyShare from 12:00 to 23:00

If it is possible, can you tell me how to do this?

Answer 1

There is no built-in utility to do this, but you could accomplish it with a scheduled revoke of the user's permissions and then a scheduled change to put the permissions back.

In Task Scheduler, you would create a basic task of cacls filename /r WolfyShare at 23:00. This revokes all access permissions of the user.

Then to restore access, you would reverse the change with cacls filename /g WolfyShare:f at 12:00.

You would create similar tasks for the other user at the corresponding times.

To disconnet a user's session, you could use net session \\computername /delete, however this method would require the user always be using the same PC.

Read about cacls.exe on Technet. Read about how to disconnect a user using net session.