I had the same request for one of our offices where they were in a shared building and wanted to lock down phones after they leave for the day. I opened a Cisco TAC service request and basically was told that Extension Mobility was the only way to do what I was looking for. Forced Authorization Codes are find for a certain level of security, but they don't go as far as my customer required. I basically am using Extension Mobility where when nobody is logged in the phone can do nothing but dial an emergency number. I didn't search for any XML apps.
If you don't want to allow any personnel to use your phones after hours you might want to take a look at the Filter option in CCM. This option allows you to permit/deny calls based on the time of the day.
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.