---
title: Time Restriction Policy
slug: kronpam-reference-guide-3-7-0/time-restriction-policy
docTags: 
createdAt: 2025-06-19T10:43:06.700Z
---

Sessions are warned and disconnected by the time defined in the time restriction policy.

To create a time Restriction for the RDP Profile:

1. Navigate to **Policy** > **Policy > Add**.
2. Select the **Time Restriction** from the drop-down menu and click Next.
3. Fill out the **Name** and **Time Zone** fields.
4. Select the allowed days and define a time interval for the restriction, and click the **Save** button.
5. The Time Restriction policy now appears in the **All Policy Keys **section of the policy screen.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/HSw-lExxug2C5EhAp9lr0_image.png)

:::hint{type="info"}
To be able **to use the Time Restriction Policy**, there must be **a policy group including rdp profile** defined in the realm.
:::

:::hint{type="info"}
- The timezone list includes a **Server Default** option, which sets the timezone to the default time zone of the PAM server (e.g., Europe/Istanbul).
- The default value in the Timezone area of the Edit Policy Key shows the UTC timezone offset.
- The input area for hours in the Edit Policy Key is restricted to the HH: MM format (a warning appears if an incorrect format is entered).
:::

:::hint{type="info"}
**Working principle **of time restriction policy:
When initiating a session, only time restrictions based on the end time are fetched, and the restriction with the closest upcoming end time is applied.
:::

To add this RDP Profile to a Policy Group:

1. Navigate to **Policy > Policy.**
2. Click the **Add** tab.
3. Select the **RDP Profile or Time Restriction** and move it to the list box on the right.
4. Fill out the required fields.
5. Click the **Save** button.
6. Create a group from the** Policy Group** on the left of the screen and add the** RDP Profile.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/hBhNoiFqo7oIwAW1DUVlr_image.png" size="74" width="793" height="746" position="center" caption="Policy Group with an RDP Profile and Time Restriction included as a Policy Key" showCaption="true"}

To link this Policy Group with a Device Group Realm, please refer to section [Policy Realm Definition](docId\:HHs_3DRwBzxctz5Q4Acs0) 

The profile rules apply whenever an RDP Profile is part of a Policy Group included in a Policy Group Realm for the connection. When it is not included, the Device Properties will apply, regardless of the users that are connecting.