@melodyc_lam I 100% _do_ want to restrict students, I just don't want to restrict faculty, and I don't want to have to make per-course settings changes. (And don't want to have to rely on faculty making their own exports.) My observation is that restricting students at the account level (at least for courses in a sub-account) seems to have no discernible impact.
There's definitely a layer (at the moment) of me being annoyed and not wanting to have to do things like update my course templates and write end-of-year scripts because this feels like a dumb issue (I've set the setting at the account level, I've configured the term dates, I see no reason why the course should still be "available" to students) and I am 100% digging in my heels irrationally.
I am of course, capable of doing all these things, once I get out of my current state of pique.
Our courses are organized into major sub-accounts by things like Academics, Activities, and Advisory Groups, with all of the Academics sub-account courses being synced out of the SIS (along with term information) into sub-accounts organized by department. We have faculty set up as "admins" on the academics account with access to browse each other's courses (but not grades), and then deans and department heads set up as admins on appropriate sub-accounts to also be able to browse grades.
I've got the restrict-student-access-by-date setting turned on on our root account, and the course is in a sub-sub-acount of the root, which may be impacting the issue… but which still doesn't make sense to me in my current state of appalled outrage. 😉