Solved

GPO to lock a workstation after 15 min and logout after 30 min idle

Posted on 2013-06-24
8
21,190 Views
1 Endorsement
Last Modified: 2013-07-09
Hi,

I am hoping someone can help me in regards to the GPO settings to be able to lock a users computer when idle for 15 minutes, and then log them out of the computer when they are idle for 30 minutes.

I am a bit time poor at the moment and would apprciate the help.  I've done this for RDP sessions before, but not for when a user is actually logged into a workstation.  Being able to also shutdown a workstation that is inactive for 2 hours would be handy as well.

Hope that make sense and any help would be appreciated.

Thanks,
Dave
1
Comment
Question by:biggles70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 9

Accepted Solution

by:
dj0rbit earned 125 total points
ID: 39273636
0
 

Author Comment

by:biggles70
ID: 39273676
Thanks for that - getting there.  

I've setup the GPO and now it will lock after the workstations after 15 minutes of inactivity.  Just need to set it up to logout the user when idle for 30 minutes and the shutdown the workstation after 2 hours of inactivity.  

Would appreciate any help I can get on those ones?
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 125 total points
ID: 39273692
For shutting down the computers after x minutes of idle:
Shutdown computer after x mins of idle
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 
LVL 54

Assisted Solution

by:McKnife
McKnife earned 125 total points
ID: 39273945
For logging out, you could use the winexit screensaver as described here http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html or create a scheduled task that uses the command shutdown -f -l -t 0 and have it triggered on idle 30.
Both can be deployed.
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 125 total points
ID: 39274499
0
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 39275178
just an fyi - we attempted to do something similar, but ran into issues with the winexit.scr.

it would not set the screensaver (but would log out after inactivity).. winexit.scr does NOT seem to work nicely with Windows 7
0
 
LVL 54

Expert Comment

by:McKnife
ID: 39275685
fyi, I linked a thread that explained what is needed for winexit to run on 7: http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html
0
 

Author Closing Comment

by:biggles70
ID: 39313185
Thanks to all for the feedback and ideas, and hope no one minds the points split.  We ended up using the screen saver through GPO to lock the screens with password after 15 minutes as mentioned by dj0rbit.

In addition to that we weren't allowed to run scheduled tasks or any third party software due to security and app whitelisting requirments - I liked the idea of the scheduled task from phoenix5ire but not sure about the winexit idea mentioned by McKnife as we didn't get that far.  

As the requirements were moved on us late in the peice, we ended up setting logon hours which logs the users out when outside of business hours - mentioned in virastar's second URL.  

Thanks again to all.
Dave
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision Office 365 tenants, synchronize your on-premise Active Directory, and implement Single Sign-On.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question