GPO Timeout

I need to Lock users after 5or 10 min of inactivity for security but I don't want them to be logged off.
 Is there an GPO on a Win 2008 server already that i can just enable? If so and where is it?
jackm1Asked:
Who is Participating?
 
HobettConnect With a Mentor Commented:
As the user is logged in with their own username and password,the screen saver is locked in the context of that user. So only the user that is logged in can unlock it using their password or an administrator.
0
 
HobettCommented:
The best way to acheive this is by using the screen saver and setting it to require a password.

This will measure inactivity and not a set session time.

The best way for tasks such as this is to use Microsoft's Group Policy Search tool.

http://gps.cloudapp.net/

You want to look under Control Panel \ Display. You will need to set the screensaver, a timeout period and that a password is required.
0
 
jackm1Author Commented:
I really don't want to use the screen saver function is possible, but just use a GPO
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
HobettCommented:
As far as I am aware there is no other functionality within the default GPOs to acheive what you require. The GPO settings configure the components of Windows to alter functionality. There is no GPO entry that states lock a user after x period of time, but there is to configure the screen saver to do it. Why do you not want to use a screensaver?

Just like the Microsoft recommended way to log a user out after x period of time is to use the winexit.scr screensaver from the 2003 resources kit.

Consider how a user would lock the computer using Win + L or Ctrl + Alt + Del, Lock Computer. Unless you wrote a script or program to monitor for inactivity and then execute this key command the functionality already exists in the screensaver.
0
 
jackm1Author Commented:
Ok, I started looking on line...Stll trying to figure this out.
If I implement this by Group Policy,where does the user get the password to unlock his screen saver?
0
 
jackm1Author Commented:
Ok, thanks I will give it a try.
0
 
jackm1Author Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for jackm1's comment http:/Q_27411132.html#37032836

for the following reason:

This is good
0
 
jackm1Author Commented:
This was a mistake
0
 
jackm1Author Commented:
Thanks
0
 
HobettCommented:
Glad I could help and thank you for the points.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.