How to set up, manage, and enforce computer usage time limits โ from built-in Microsoft tools to Group Policy and third-party software.
Excessive unregulated computer time is linked to disrupted sleep, reduced physical activity, and difficulties concentrating in school-age children. Whether you are a parent managing a household PC, an IT administrator controlling employee workstations, or someone who simply wants to build healthier personal habits, Windows offers several built-in and third-party tools to restrict computer usage by time of day, total daily hours, or both.
Unlike mobile platforms where screen time controls are baked into every device, Windows has historically scattered these features across different interfaces. With Windows 10 version 1803 and the subsequent Windows 11 redesign, Microsoft unified most parental controls under the Microsoft Family Safety umbrella โ but the older Local Security Policy and Group Policy methods remain fully functional and are often more powerful.
Before diving into step-by-step instructions, it helps to understand the landscape. Windows provides four distinct approaches to limiting usage time, each suited to different scenarios and technical skill levels.
Cloud-based, works across devices. Best for families with Microsoft accounts. Requires internet connectivity to sync.
Built into Windows since XP via net user command. Offline, no Microsoft account needed. Hour-by-hour blocking only.
Available on Pro, Enterprise, and Education editions. Granular control but requires domain or local GPO knowledge.
Tools like Qustodio, Circle, or Cold Turkey offer daily limits, app-level blocking, and detailed usage reports.
Microsoft Family Safety is the most feature-rich and user-friendly option for parents. It allows you to set daily screen time schedules, app and game limits, content filters, location tracking, and spending controls โ all from a single dashboard that syncs across Windows, Xbox, and Android/iOS devices.
Beyond total screen time, Family Safety lets you restrict specific applications. Navigate to Apps and games in the child's profile. Windows will automatically populate a list of apps the child has used. You can set individual daily time budgets per app โ for example, limiting a game to 1 hour even if the child still has general screen time remaining.
If privacy is a concern or the managed user does not have a Microsoft account, Windows includes a built-in command-line tool โ net user โ that restricts which hours of the day a local account can log in. This method has been part of Windows since the NT era and is completely offline.
net user /times command restricts login hours only. It does not enforce a daily usage limit (e.g., "2 hours total"). It also does not log the user out if they are already active when the blocked period begins โ it only prevents new logins. To force logoff, pair this with a scheduled task.
Open Command Prompt as Administrator (right-click Start โ Terminal (Admin) or search "cmd" and run as admin), then use the syntax below.
Command Prompt โ Administrator
:: Allow login only Monday-Friday 3pm-9pm, Saturday-Sunday 10am-8pm
net user ChildAccount /times:M-F,15:00-21:00;Sa-Su,10:00-20:00
:: Allow all hours (remove restriction)
net user ChildAccount /times:all
:: Block all login (account locked out entirely)
net user ChildAccount /times:none
ChildAccount with the exact username as shown in Control Panel โ User Accounts. Usernames with spaces must be wrapped in quotes: "Child Account".
shutdown, Arguments = /l /f (this logs off all users forcefully)./f flag forcefully closes all applications. Any unsaved documents will be lost. Consider using a notification script to warn the user 5โ10 minutes before logoff (using msg * "Computer will shut down in 5 minutes").
The Local Group Policy Editor (gpedit.msc) is available on Windows 10/11 Pro, Enterprise, and Education editions. While it does not include a dedicated "screen time" setting, you can combine several policies to achieve granular control โ including logon hour enforcement, app blocking, and automatic workstation lock.
gpedit.msc, and press Enter.| Policy Path | Setting Name | Effect |
|---|---|---|
Computer Config โ Windows Settings โ Security Settings โ Local Policies โ Security Options |
Interactive logon: Machine inactivity limit | Locks the screen after N seconds of inactivity |
User Config โ Admin Templates โ Control Panel โ Personalization |
Enable screen saver / Force specific screen saver | Forces lock screen after idle time |
Computer Config โ Windows Settings โ Security Settings โ Account Policies โ Account Lockout |
Account lockout threshold | Locks account after failed login attempts |
User Config โ Admin Templates โ System |
Prevent access to the command prompt | Stops bypassing restrictions via CMD |
User Config โ Admin Templates โ Windows Components โ File Explorer |
Prevent users from adding/removing apps | Blocks installation of workaround tools |
On a standalone (non-domain) PC, the Local Group Policy Editor applies settings to all users by default. To target a specific user account, use the Microsoft Management Console (mmc.exe) to create a custom GPO snap-in scoped to a particular user. This is an advanced workflow and is documented in Microsoft's support article KB3047861.
For administrators who need scriptable, policy-independent time restrictions, the Windows Registry contains several keys that can enforce logon hour limits and application access controls. This method is powerful but carries risk โ incorrect registry edits can destabilize Windows.
regedit โ File โ Export โ save as registry-backup.reg. To restore, simply double-click the .reg file.
Windows stores logon hour restrictions in the Security Account Manager (SAM) hive, which is not directly editable through regedit under normal circumstances. The recommended scriptable approach is to use net user combined with a PowerShell startup script deployed via Task Scheduler.
PowerShell โ Run as Administrator
# Set logon hours: Mon-Fri 3pm-9pm, weekends 10am-8pm
$username = "ChildAccount"
net user $username /times:M-F,15:00-21:00;Sa-Su,10:00-20:00
# Verify the setting was applied
net user $username | Select-String "Logon hours"
The Software Restriction Policies registry keys under HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer can block specific executables. Combined with time-based scheduled tasks that enable or disable these keys, you can create a rudimentary app-blocking schedule without Group Policy.
Registry โ Software Restriction
; Block an application via Registry (example: block Steam outside hours)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\0\Paths\{GUID}]
"Description"="Block Steam outside allowed hours"
"ItemData"="C:\\Program Files (x86)\\Steam\\steam.exe"
"SaferFlags"=dword:00000000
When built-in tools fall short โ especially for detailed usage reports, per-app daily limits, or cross-platform consistency โ third-party software fills the gap. Here are the most reliable options in 2025.
| Software | Platform | Key Feature | Price | Best For |
|---|---|---|---|---|
| Qustodio | Windows, Mac, iOS, Android | Per-app time limits, detailed reports, panic button | From $54.95/yr | Families, comprehensive monitoring |
| Net Nanny | Windows, Mac, iOS, Android | Dynamic content filtering + screen time | From $39.99/yr | Content control + time limits |
| Cold Turkey | Windows, Mac | Unbreakable blocks, pomodoro timer, schedule | $39 one-time | Self-discipline, adults |
| Circle Home Plus | Router-level (all devices) | Network-wide limits, no software install on device | $129 device + $9.99/mo | Whole-home management |
| KidLogger | Windows, Mac, Android | Keylogging, screenshot capture, time tracking | Free / $27/yr | Detailed monitoring (privacy concerns) |
| Freedom | Windows, Mac, iOS, Android, Chrome | Cross-device website + app blocking sessions | $3.33/mo (annual) | Productivity, adults |
Understanding common workarounds is essential to building effective restrictions. Technically savvy children often discover these methods within days of a new restriction being applied.
| Bypass Method | How It Works | Countermeasure |
|---|---|---|
| Changing system clock | Moving the time forward to appear within allowed hours | Sync time via NTP server; restrict clock-change access via GPO (System time privilege removal) |
| Using a different user account | Logging in as another unrestricted account | Remove all standard accounts; password-protect admin account; disable Guest account |
| Booting from USB / Live OS | Running a portable OS that bypasses Windows entirely | Enable Secure Boot; set BIOS/UEFI password; disable USB boot order |
| VPN or Tor browser | Circumventing network-level content filters | Block VPN protocols at router level; use DNS filtering (e.g., CleanBrowsing, NextDNS) |
| Safe Mode boot | Many parental control services don't run in Safe Mode | Require password to access Safe Mode (available via msconfig); use Cold Turkey which persists in Safe Mode |
| Uninstalling the control software | Removing the third-party tool from Programs | Use tools with tamper protection; restrict Programs access via GPO; Qustodio and Cold Turkey require password to uninstall |
net user /times command in an elevated Command Prompt to restrict login hours for a local account. This requires no Microsoft account and works on all Windows editions. However, you lose features like daily time budgets, per-app limits, and activity reports that Family Safety provides.
net user /times, the syntax supports different ranges per day: M-F,15:00-21:00;Sa-Su,10:00-20:00.
net user /times settings apply only to the specific account they are configured for. The parent or administrator account remains unrestricted. This is by design โ you should always keep a separate admin account with a strong password that the child does not know.
net user /times: run net user ChildAccount /times:all in an admin Command Prompt. For Group Policy changes: open gpedit.msc and set affected policies back to "Not Configured".
The right tool depends entirely on your situation. Here is a quick decision guide to point you in the right direction.
Family with kids, Microsoft accounts already in use? โ Start with Microsoft Family Safety. It is the most complete, easiest-to-manage solution and it is free.
Privacy-focused household or offline PC? โ Use net user /times for login hour restrictions, supplemented by a scheduled logoff task.
IT administrator managing company workstations? โ Deploy time-based restrictions through Group Policy or Active Directory, combined with network-level controls at the firewall.
Adult wanting to limit your own computer time? โ Cold Turkey or Freedom are purpose-built for this use case and notably harder to bypass than parental controls.
Need cross-device coverage including gaming consoles and mobile? โ Circle Home Plus (router-level) or Qustodio (agent-based) offer the broadest coverage.