Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

GPO to lock a workstation after 15 min and logout after 30 min idle

Posted on 2013-06-24
8
Medium Priority
?
23,686 Views
1 Endorsement
Last Modified: 2013-07-09
Hi,

I am hoping someone can help me in regards to the GPO settings to be able to lock a users computer when idle for 15 minutes, and then log them out of the computer when they are idle for 30 minutes.

I am a bit time poor at the moment and would apprciate the help.  I've done this for RDP sessions before, but not for when a user is actually logged into a workstation.  Being able to also shutdown a workstation that is inactive for 2 hours would be handy as well.

Hope that make sense and any help would be appreciated.

Thanks,
Dave
1
Comment
Question by:biggles70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 9

Accepted Solution

by:
dj0rbit earned 500 total points
ID: 39273636
0
 

Author Comment

by:biggles70
ID: 39273676
Thanks for that - getting there.  

I've setup the GPO and now it will lock after the workstations after 15 minutes of inactivity.  Just need to set it up to logout the user when idle for 30 minutes and the shutdown the workstation after 2 hours of inactivity.  

Would appreciate any help I can get on those ones?
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 500 total points
ID: 39273692
For shutting down the computers after x minutes of idle:
Shutdown computer after x mins of idle
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 56

Assisted Solution

by:McKnife
McKnife earned 500 total points
ID: 39273945
For logging out, you could use the winexit screensaver as described here http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html or create a scheduled task that uses the command shutdown -f -l -t 0 and have it triggered on idle 30.
Both can be deployed.
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 500 total points
ID: 39274499
0
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 39275178
just an fyi - we attempted to do something similar, but ran into issues with the winexit.scr.

it would not set the screensaver (but would log out after inactivity).. winexit.scr does NOT seem to work nicely with Windows 7
0
 
LVL 56

Expert Comment

by:McKnife
ID: 39275685
fyi, I linked a thread that explained what is needed for winexit to run on 7: http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html
0
 

Author Closing Comment

by:biggles70
ID: 39313185
Thanks to all for the feedback and ideas, and hope no one minds the points split.  We ended up using the screen saver through GPO to lock the screens with password after 15 minutes as mentioned by dj0rbit.

In addition to that we weren't allowed to run scheduled tasks or any third party software due to security and app whitelisting requirments - I liked the idea of the scheduled task from phoenix5ire but not sure about the winexit idea mentioned by McKnife as we didn't get that far.  

As the requirements were moved on us late in the peice, we ended up setting logon hours which logs the users out when outside of business hours - mentioned in virastar's second URL.  

Thanks again to all.
Dave
0

Featured Post

Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question