asked on

Force Inactivity logg off using group policy server 2003

I am looking to force log off of any user that is inactive for more than ten minutes for a group of thirty computers. all of the computers are in the same OU, the users are not all in the same OU. If I could use group policy it would be best, but I could possibly do something on the local machines.

thanks for all your help

ASKER CERTIFIED SOLUTION

LauraEHunterMVP

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Jeremy_Wiley

Use group policy for that task. Create a new Policy and attach it to the OU that contains the computers you want to apply this rule to.

Then modify the policies in the following location:
Computer COnfiguration>Administrative Templates
>Windows Compnonents>Terminal Services>Sessions

Set the time limit for "disconnected sessions" and "active but idle sessions" to 30 minutes.

Hope that helps.

LauraEHunterMVP

Keep in mind that that setting will only apply to Terminal Server connections - I took the OP to mean that he's trying to limit logon times on an interactive logon.

andrewm123

ASKER

Yes that is correct I am trying to limit interactive logon inactivity.

In particulay we have a computer lab where 500 students share 30 computers, so you can imagine the problems associated with children not logging out. I am a little confused about that steadystate suggestion. Could someone explain to me how that would work?

thanks

LauraEHunterMVP

It's a downloadable tool from the MS website. In a workgroup configuration, you can lock down lab/kiosk configuration from the SteadyState management console. In an Active Directory environment you can integrate with Group Policy to distribute lockdown settings.

Download the SteadyState handbook to see how to incorporate it in your particular environment: http://www.microsoft.com/downloads/details.aspx?FamilyID=D64AF114-336C-4418-BEB7-E074E813B498&displaylang=nl

andrewm123

ASKER

How could i use it to force inactivity log off?

LauraEHunterMVP

As explained in the handbook I linked you to above (http://download.microsoft.com/download/e/8/b/e8b7c732-93b3-4f0b-aab0-5526cc8505db/Windows%20SteadyState%20Handbook.pdf for the direct link), SteadyState includes a Group Policy template that includes the capability to set idle and mandatory logoff timers once the SteadyState client is installed on the computers in question.)

andrewm123

ASKER

Does this have to be installed on the local machines? As far as I can tell it does. Which is not so bad i Guess. I was hoping it could be doen using AD.

LauraEHunterMVP

SteadyState has a required client component to enforce the more advanced features such as hard drive "freezing" and idle timers, yes.