Membership in Account Operators, Domain Admins, or Enterprise Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at

To modify logon hours for a user account using Active Directory Administrative Center
  1. To open Active Directory Administrative Center, click Start, click Administrative Tools, and then click Active Directory Administrative Center.


    Another way to open Active Directory Administrative Center is to click Start, click Run, and then type dsac.exe.

  2. In the navigation pane, select the node that contains the user account whose logon hours you want to modify.

  3. In the management list, right-click the user whose logon hours you want to modify, and then click Properties.

  4. In the Account section, click Log on hours, and then set the permitted or denied logon hours for the user.

Additional considerations

  • You can also perform the task in this procedure by using the Active Directory module for Windows PowerShell. To open the Active Directory module, click Start, click Administrative Tools, and then click Active Directory Module for Windows PowerShell. For more information, see Modify the Logon Hours of a User Account (

    For more information about Windows PowerShell, see Windows PowerShell (

Additional references