auto logoff with GPO

i found a few article regarding this but they all refer to using screensavers.  

i have a room with 20 public computers.  i need to force user to log off after 10 minutes of inactivity.  using a screen saver to lock the machine wont help as someone will have to administer the machine in order to get someone else logged in.  

this is what i want to achieve

1. if a computer is logged in and remains idle for 20 mins, the computer then logs the current user off.  
2. if possible, a popup that will show the user that they have 10 mins to log off and save work before the 6pm shut down

3. limit users to a specific time of work (i have already configured this portion vie the GPO)
Who is Participating?
McKnifeConnect With a Mentor Commented:
1) Microsoft constructed a special screen saver for this: winexit.scr, see and download winexit.scr from - I assume (but do not know) that this will work with all versions of windows up to 7.
2) deploy a scheduled task to run at 5:50 pm that starts the command
msg * shutdown in 10 mins! Please save your documents soon and logoff.

1) could be solved by a scheduled task, too. Vista and win7 know the trigger called "on idle", read the help section about what "on idle" means to task manager.
johnkesoglouAuthor Commented:
i dont believe this is what i am looking for...this forces a user to log off the Kerio Control, a network security company.  

unless i am missing something......
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Sarang TinguriaSr EngineerCommented:
Define logon Hours for users and Use Group policy "Network Security:Force Logoff when logon hours expire"

There is nothing Built-in to achieve what you are looking for
johnkesoglouAuthor Commented:

below is a link for Kerio.  the above proposed solution from Xaelian refers to this Kerio Control and the link that he put up offers a solution, from which i believe, is solely for the application Kerio.
Sarang TinguriaSr EngineerCommented:
McKnife Thanks for Sharing Valuable info Will test this in Lab
johnkesoglouAuthor Commented:
this is exactly what i was looking for
Ok, then let me add just in case you are not familiar with scheduled tasks:
The task(s) would need to be run with the system acvcount as executing account. That way, no password is needed for the task AND it runs elevated by default. To deploy Tasks, use this procedure:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.