Solved

GPO to lock a workstation after 15 min and logout after 30 min idle

Posted on 2013-06-24
8
21,667 Views
1 Endorsement
Last Modified: 2013-07-09
Hi,

I am hoping someone can help me in regards to the GPO settings to be able to lock a users computer when idle for 15 minutes, and then log them out of the computer when they are idle for 30 minutes.

I am a bit time poor at the moment and would apprciate the help.  I've done this for RDP sessions before, but not for when a user is actually logged into a workstation.  Being able to also shutdown a workstation that is inactive for 2 hours would be handy as well.

Hope that make sense and any help would be appreciated.

Thanks,
Dave
1
Comment
Question by:biggles70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 9

Accepted Solution

by:
dj0rbit earned 125 total points
ID: 39273636
0
 

Author Comment

by:biggles70
ID: 39273676
Thanks for that - getting there.  

I've setup the GPO and now it will lock after the workstations after 15 minutes of inactivity.  Just need to set it up to logout the user when idle for 30 minutes and the shutdown the workstation after 2 hours of inactivity.  

Would appreciate any help I can get on those ones?
0
 
LVL 3

Assisted Solution

by:phoenix5ire
phoenix5ire earned 125 total points
ID: 39273692
For shutting down the computers after x minutes of idle:
Shutdown computer after x mins of idle
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 55

Assisted Solution

by:McKnife
McKnife earned 125 total points
ID: 39273945
For logging out, you could use the winexit screensaver as described here http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html or create a scheduled task that uses the command shutdown -f -l -t 0 and have it triggered on idle 30.
Both can be deployed.
0
 
LVL 9

Assisted Solution

by:VirastaR
VirastaR earned 125 total points
ID: 39274499
0
 
LVL 16

Expert Comment

by:ThinkPaper
ID: 39275178
just an fyi - we attempted to do something similar, but ran into issues with the winexit.scr.

it would not set the screensaver (but would log out after inactivity).. winexit.scr does NOT seem to work nicely with Windows 7
0
 
LVL 55

Expert Comment

by:McKnife
ID: 39275685
fyi, I linked a thread that explained what is needed for winexit to run on 7: http://www.sevenforums.com/performance-maintenance/68519-anyone-get-winexit-scr-work-win7.html
0
 

Author Closing Comment

by:biggles70
ID: 39313185
Thanks to all for the feedback and ideas, and hope no one minds the points split.  We ended up using the screen saver through GPO to lock the screens with password after 15 minutes as mentioned by dj0rbit.

In addition to that we weren't allowed to run scheduled tasks or any third party software due to security and app whitelisting requirments - I liked the idea of the scheduled task from phoenix5ire but not sure about the winexit idea mentioned by McKnife as we didn't get that far.  

As the requirements were moved on us late in the peice, we ended up setting logon hours which logs the users out when outside of business hours - mentioned in virastar's second URL.  

Thanks again to all.
Dave
0

Featured Post

Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question