Re: Logoff users after idle time?


Thanks for your reply Brandy.

I had hoped to find a way to do this without using screensaver, but I guess
this is afterall the best way...

Is it possible to use Scheduled Tasks?
I noticed that on Settings tab, there's a "Idle time" section. I think you
could use this to start a logout script after predefined idle time.
Still there's the problem of how to deploy this to multiple clients.

Jussi

""Brandy Nee [MSFT]"" <v-branee@xxxxxxxxxxxxxxxxxxxx> kirjoitti
viestissä:BgYFx21OFHA.3136@xxxxxxxxxxxxxxxxxxxxxxxx
> Hello Jussi,
>
> Thank you for posting to the SBS Newsgroup.
>
> My understanding is that you want to log off the users when their sessions
> are idled for a period, if I have misunderstood you, please let me know.
>
> There is no central method such as using Group Policies to force users log
> off their workstations after an idle time. If you do not want to touch the
> client workstations one by one, we can just use Group Policies to force
> the
> client workstations to lock after a period of time. To do so, please
> perform the following steps:
>
> 1. Click Start->Administrative Tools->Group Policy Management.
>
> 2. Expand Forest, Domains and your domain name, right click on Default
> Domain Policy and choose Edit.
>
> 3. Expand to User Configuration->Administrative Template->Control
> Panel->Display.
>
> 4. On the right pane, enable the "Hide Screen Saver tab" policy so that
> users cannot change his screen savers.
>
> 5. Enable the "Screen Saver" policy so that users will have a screen
> saver.
>
> 6. Enable the "Screen Saver executable name" policy to specify the screen
> saver's exetable file name. You can type the following exact string to
> specify the Windows Default Screen Saver - Startfield (you can also
> specify
> other default screen savers):
>
> %Systemroot%\System32\ssstars.scr
>
> 7. Enable the "Password protect the screen saver" policy so that users
> will
> be prompted for credentials when they are back.
>
> 8. Enable the "Screen Saver timeout" policy and specify 900 as the value
> so
> that the idle time will be 15 minutes.
>
> 9. After enabling the policies, close the Policy Editor and then ask all
> the users to log off and then re-log on. These policies should be working.
> Now when users are always from their workstations, the screen saver will
> work after 15 minutes and when someone wants to use the computers, he has
> to enter the original user's credential.
>
> If you still want to log off users other than locking their workstations,
> you will have to install the Winexit.scr Scren Saver on all your client
> workstations and then configure the policies to use this screen saver. To
> do so:
>
> 1. Download the Windows Server 2003 Resource Kit tools from the following
> link and install it on your SBS 2003 server:
>
> http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-
> 96ee-b18c4790cffd&displaylang=en
>
> 2. After installing the Resource Kit tools, locate the Winexit.scr file
> and
> then copy it to all your client computers and place it in the
> %Systemroot%\System32 folder.
>
> 3. Log on each client computers, go to the %Systemroot%\System32 folder,
> right click the Winexit.scr file and choose Install to install this screen
> saver.
>
> 4. Re-do the above steps and at step 6, specify the following string as
> the
> screen saver's executable file:
>
> %Systemroot%\System32\Winexit.scr
>
> Thus when users leave their workstations and after 15 minutes, this screen
> saver will run and the userswill be logged off their workstations by this
> scren saver. For more information, please refer to the following Microsoft
> Knowledge Base article:
>
> 314999 HOW TO: Force Users to Quit Programs and Log Off After a Period of
> http://support.microsoft.com/?id=314999
>
> Hope this information answers your question. I am looking forward to
> hearing from you soon.
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>


.

Relevant Pages

  • Re: Screen Saver Policy
    ... We already implented a policy like that. ... All workstations use the default logon NT screensaver with a 15 min timeout. ...
    (Security-Basics)
  • Screensaver policy on some PCs
    ... I first tried to setup a default screensaver policy in the "Default ... Domain Policy" but it was only sent out to some PCs. ... Hide Screen Saver tab = Enabled ... propogated by now (we have the default group policy refresh time set). ...
    (microsoft.public.win2000.group_policy)
  • Re: "Lock workstations" after certain idle time. Is it advisable to do it from server side
    ... In order to enable the 'lock workstation' screensaver, ... Do you have configure "Screen Saver executable name" ... > You need to set the User screensaver policy in User Configuration:> Administrative Templates: Control Panel: Display. ... >> workstations" on our WinXP/Win2000Prof automatically in case users leave ...
    (microsoft.public.win2000.active_directory)
  • Re: Screen Saver not running
    ... Use the screensaver for exaple logon.scr i GPO, ... This policy has been running fine ... But now I have one user who logs in and the screen saver does ... >> Password protect the screen saver Enabled XP/2K User Restrictions ...
    (microsoft.public.win2000.group_policy)
  • Re: screen saver stopped working
    ... >>> selecting "blank" means no screensaver, ... >> Ken Blake - Microsoft MVP Windows: ... >>>> The screen saver in use is the one named 'blank' in the ... >>>> of savers built in with XP. ...
    (microsoft.public.windowsxp.general)