Limit users to log-ins during those times when they are actually working. This should be designated initially when they are given access. Special privileges for remote users may need to be established. This also should be designated when they are initially given access to the system or network. Suspending the account will prevent an unauthorized user from retrying to log in later.
Legitimate users can always request that their access be reestablished.
Require all authorized users to log off when they leave their work station and to log off and turn off the computer after use. This prevents any unauthorized use when the work station is unattended. All authorized users should be required to sign an appropriate use agreement before they receive access to the system or network. Every computer system or network must have a secure login system. Its purpose is to restrict access to only those individuals who have permission to enter the system or network and only at the level of access that each employee has been assigned by administrators, based on their need to accomplish their job.