I am looking for a way to prevent users from logging in in a certain time span, let's say for a few days after new year's eve to check all data in the system.

I thought about the "Login Hours" on a profile level, but it would be nice if there was a faster (more global) way to do this.

Also it would be really great if the user gets a notification on login, why he can't access the system right now, that I define (e.g., "you can't login because we are checking data...").

Do you have any ideas or experience with that?


I recommend a "maintenance" profile. We have one with all of the login hours set to midnight, preventing users from logging on completely. Another option would be to have your profile set to only show a web tab with your maintenance message.

The nice thing about maintenance profiles is that you can mass update all of your users via the Data Loader (just make sure you don't lock out your system admins.)


Note, this cannot be accomplished with Permission Sets since they only add to a user's access.

  • There will always be one "master sysadmin" whose profile can't be edited and user account can't be deactivated ;)
    – eyescream
    Nov 26 '12 at 16:05
  • Yes, but we wouldn't want to need to call support ;- )
    – Mike Chale
    Nov 26 '12 at 16:18
  • Thanks Mike, that is a good idea. so 1.) Backup User <-> Profile assignment 2.) Change all users to "Maintenance" profile 3.)Maintain! 4.) Re-assign User <-> Profile That's really cool idea! Does anyone know if this could be achieved via Permission Set? Nov 26 '12 at 17:40
  • 2
    No, that would not work. Permission sets only grant access and cannot be used to deny access.
    – Mike Chale
    Nov 26 '12 at 17:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.