Are you using a domain or Active Directory??? If so there is an option in which you can control how long and when they can login.