We help IT Professionals succeed at work.

auto logoff with GPO

Medium Priority
2,624 Views
Last Modified: 2013-06-12
i found a few article regarding this but they all refer to using screensavers.  

i have a room with 20 public computers.  i need to force user to log off after 10 minutes of inactivity.  using a screen saver to lock the machine wont help as someone will have to administer the machine in order to get someone else logged in.  

this is what i want to achieve

1. if a computer is logged in and remains idle for 20 mins, the computer then logs the current user off.  
2. if possible, a popup that will show the user that they have 10 mins to log off and save work before the 6pm shut down

3. limit users to a specific time of work (i have already configured this portion vie the GPO)
Comment
Watch Question

Author

Commented:
i dont believe this is what i am looking for...this forces a user to log off the Kerio Control, a network security company.  

unless i am missing something......
CERTIFIED EXPERT
Top Expert 2012

Commented:
Define logon Hours for users and Use Group policy "Network Security:Force Logoff when logon hours expire"

There is nothing Built-in to achieve what you are looking for

Author

Commented:
Sarang


below is a link for Kerio.  the above proposed solution from Xaelian refers to this Kerio Control and the link that he put up offers a solution, from which i believe, is solely for the application Kerio.  

http://www.kerio.com/control
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
Hi.
1) Microsoft constructed a special screen saver for this: winexit.scr, see http://support.microsoft.com/kb/314999/en-us and download winexit.scr from http://www.microsoft.com/en-us/download/details.aspx?id=17657 - I assume (but do not know) that this will work with all versions of windows up to 7.
2) deploy a scheduled task to run at 5:50 pm that starts the command
msg * shutdown in 10 mins! Please save your documents soon and logoff.

1) could be solved by a scheduled task, too. Vista and win7 know the trigger called "on idle", read the help section about what "on idle" means to task manager.
CERTIFIED EXPERT
Top Expert 2012

Commented:
McKnife Thanks for Sharing Valuable info Will test this in Lab

Author

Commented:
this is exactly what i was looking for
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Ok, then let me add just in case you are not familiar with scheduled tasks:
The task(s) would need to be run with the system acvcount as executing account. That way, no password is needed for the task AND it runs elevated by default. To deploy Tasks, use this procedure: http://technet.microsoft.com/en-us/library/cc725745.aspx