Schedule rules are designed to detect discrepancies in employee schedules or workflows. For example, you can use them to receive a notification when an employee is late, block remote logins during off-hours, etc.
You can specify the detection criteria for these rules in the Schedule tab of the Rule Editor.
Schedule rules use the employee schedules and the time zone set in the Dashboard's Locale settings to determine their detection criteria.
Schedule Rule Examples
Get notified when a user attempts to log in during abnormal hours or on a day off.
Warns the user or automatically locks out their computer if they are idling for too long.
Notify the supervisor automatically when an employee is absent or late.
Notify HR and/or payroll if the employee’s work time or scheduled work hours change.
Create a list or range of restricted IPs and disallow login from those IPs.
Schedule Rule Criteria
The table below explains what criteria or schedule violation incidents the Schedule rules support and what conditions you can use with them.
Daily Work Time
This criterion can be used to detect if there are any discrepancies in an employee’s daily work time. You can detect if their work hours are less than or more than the specified hours.
Select either Is Greater Than or Is Less Than and enter an hour value in the Define the time range field.
Scheduled Work Time
This criterion can be used to detect if an employee is working longer or shorter than scheduled.
Select either Is Greater Than or Is Less Than and enter a minute value in the Define the time range field.
Starts
This criterion can be used to detect if an employee started their work earlier than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Ends Early By
This criterion can be used to detect if an employee ends their work earlier than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Ends Late By
This criterion can be used to detect if an employee ends their work later than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Arrives Late
This criterion can be used to detect if an employee starts their work later than scheduled by the specified minutes. Note that, unlike the “Is Late” condition, this will trigger the rule after the employee has logged in.
Enter a minute value in the Define the time range field.
Absent
This criterion can be used to detect if an employee is absent.
No other value is required.
Arrives Late
This criterion can be used to detect if an employee is late in logging in to their computer according to their scheduled start time. Note that, unlike the “Arrives Late” condition, this will trigger the rule before the employee has logged in.
Enter a minute value in the Define the time range field.
Works on Day-Off
This criterion can be used to detect if an employee is working on their day off.
No other value is required.
Login (Stealth Agent)
This criterion can be used to detect if an employee logs in during off hours and, optionally, also detects if they are trying to log in from a restricted IP.
Set the off-hour range under the Set up off-hours section. You can click the + / – buttons to add/remove time slots. Drag the Orange Circles 
to adjust the time. The rule will not apply during these time slots.
The rule will NOT be enforced for IP addresses enter in the Restricted IPs field. You can enter any text in the IPv4 format, i.e., 101.10.2.1/32, and choose a “matches” or “does not match” condition. Or, you can select a Shared List (Network type) and specify a “matches list” or “Does not match list” condition.
If you check the Apply on screen unlock option, then the login event will be triggered as soon as the user unlocks their screen.
Click on the days under the Apply rule on these days section to select days when the rule will be enforced.
Idle
This criterion can be used to detect if an employee is idling (no keyboard or mouse activity) for more than the specified minutes.
Enter a minute value in the Define the time range field. This is the idle time threshold (see below).
Set the off-hour range under the Set up off-hours section. You can click the + / – buttons to add/remove time slots. Drag the Orange Circles to adjust the time. The rule will not apply during these time slots.
The Idle criterion will generate a single alert when the rule is violated. This means the rule will trigger when the user becomes idle for the duration specified in the rule's threshold (Define the time range field). In the above case, the user will get a warning at the 30-minute mark. If the user continues to stay idle, they will not receive any more warnings. However, if the user becomes active and then goes to idling again, the rule will reset and issue a warning after another 30 minutes.
This criterion works independently of the Idle time threshold value in the Applications monitoring settings.