Solved

GPO to lock a workstation after 15 min and logout after 30 min idle

Posted on 2013-06-24
8
18,284 Views
1 Endorsement
Last Modified: 2013-07-09
Hi,

I am hoping someone can help me in regards to the GPO settings to be able to lock a users computer when idle for 15 minutes, and then log them out of the computer when they are idle for 30 minutes.

I am a bit time poor at the moment and would apprciate the help.  I've done this for RDP sessions before, but not for when a user is actually logged into a workstation.  Being able to also shutdown a workstation that is inactive for 2 hours would be handy as well.

Hope that make sense and any help would be appreciated.

Thanks,
Dave
1
Comment
Question by:biggles70
8 Comments
 
LVL 9

Accepted Solution

by:
dj0rbit earned 125 total points
Comment Utility
0
 

Author Comment

by:biggles70
Comment Utility
Thanks for that - getting there.  

I've setup the GPO and now it will lock after the workstations after 15 minutes of inactivity.  Just need to set it up to logout the user when idle for 30 minutes and the shutdown the workstation after 2 hours of inactivity.  

Would appreciate any help I can get on those ones?
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 125 total points
Comment Utility
For shutting down the computers after x minutes of idle:
Shutdown computer after x mins of idle
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 125 total points
Comment Utility
For logging out, you could use the winexit screensaver as described here http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html or create a scheduled task that uses the command shutdown -f -l -t 0 and have it triggered on idle 30.
Both can be deployed.
0
Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 125 total points
Comment Utility
0
 
LVL 16

Expert Comment

by:ThinkPaper
Comment Utility
just an fyi - we attempted to do something similar, but ran into issues with the winexit.scr.

it would not set the screensaver (but would log out after inactivity).. winexit.scr does NOT seem to work nicely with Windows 7
0
 
LVL 53

Expert Comment

by:McKnife
Comment Utility
fyi, I linked a thread that explained what is needed for winexit to run on 7: http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html
0
 

Author Closing Comment

by:biggles70
Comment Utility
Thanks to all for the feedback and ideas, and hope no one minds the points split.  We ended up using the screen saver through GPO to lock the screens with password after 15 minutes as mentioned by dj0rbit.

In addition to that we weren't allowed to run scheduled tasks or any third party software due to security and app whitelisting requirments - I liked the idea of the scheduled task from phoenix5ire but not sure about the winexit idea mentioned by McKnife as we didn't get that far.  

As the requirements were moved on us late in the peice, we ended up setting logon hours which logs the users out when outside of business hours - mentioned in virastar's second URL.  

Thanks again to all.
Dave
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now