Solved

GPO to lock a workstation after 15 min and logout after 30 min idle

Posted on 2013-06-24
8
20,133 Views
1 Endorsement
Last Modified: 2013-07-09
Hi,

I am hoping someone can help me in regards to the GPO settings to be able to lock a users computer when idle for 15 minutes, and then log them out of the computer when they are idle for 30 minutes.

I am a bit time poor at the moment and would apprciate the help.  I've done this for RDP sessions before, but not for when a user is actually logged into a workstation.  Being able to also shutdown a workstation that is inactive for 2 hours would be handy as well.

Hope that make sense and any help would be appreciated.

Thanks,
Dave
1
Comment
Question by:biggles70
8 Comments
 
LVL 9

Accepted Solution

by:
dj0rbit earned 125 total points
ID: 39273636
0
 

Author Comment

by:biggles70
ID: 39273676
Thanks for that - getting there.  

I've setup the GPO and now it will lock after the workstations after 15 minutes of inactivity.  Just need to set it up to logout the user when idle for 30 minutes and the shutdown the workstation after 2 hours of inactivity.  

Would appreciate any help I can get on those ones?
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 125 total points
ID: 39273692
For shutting down the computers after x minutes of idle:
Shutdown computer after x mins of idle
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 125 total points
ID: 39273945
For logging out, you could use the winexit screensaver as described here http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html or create a scheduled task that uses the command shutdown -f -l -t 0 and have it triggered on idle 30.
Both can be deployed.
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 125 total points
ID: 39274499
0
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 39275178
just an fyi - we attempted to do something similar, but ran into issues with the winexit.scr.

it would not set the screensaver (but would log out after inactivity).. winexit.scr does NOT seem to work nicely with Windows 7
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39275685
fyi, I linked a thread that explained what is needed for winexit to run on 7: http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html
0
 

Author Closing Comment

by:biggles70
ID: 39313185
Thanks to all for the feedback and ideas, and hope no one minds the points split.  We ended up using the screen saver through GPO to lock the screens with password after 15 minutes as mentioned by dj0rbit.

In addition to that we weren't allowed to run scheduled tasks or any third party software due to security and app whitelisting requirments - I liked the idea of the scheduled task from phoenix5ire but not sure about the winexit idea mentioned by McKnife as we didn't get that far.  

As the requirements were moved on us late in the peice, we ended up setting logon hours which logs the users out when outside of business hours - mentioned in virastar's second URL.  

Thanks again to all.
Dave
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
how to allow only one intranet website to be accessed 7 31
gpo help required 4 28
Keyboard / User? 7 25
Antivirus in server 3 18
You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question