asked on

GPO to lock computer

Hi,

Is it possible to lock a computer via GPO at a given time? the client does not want an idle time out but a specific time.

thanks
gareth

Will Szymkowski

No this cannot be done, using GPO's.

Will.

cwstad2

You can set restrictions for user log on times if that helps.

Gareth McKee

ASKER

any other ideas on how this can be achieved?

McKnife

Sure. Deploy a scheduled task that runs in the user context of any user and launches
rundll32.exe user32.dll, LockWorkStation

Gareth McKee

ASKER

hi Mcknife,

can you put some more meat on the bones there please :-)

ASKER CERTIFIED SOLUTION

McKnife

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Gareth McKee

ASKER

To all workstations.

created a task isn't a problem, schedule etc.

I am in the new action screen:

Action: Start a program?
Settings, Program/Script - you want me to enter 'rundll32.exe user32.dll, LockWorkStation ' ?

McKnife

Exactly.
But if you want to deploy it, you need to set up the task as a group policy preference item as shown here: https://technet.microsoft.com/en-us/library/cc725745.aspx

Gareth McKee

ASKER

Yep, no problem there.

I have tried this locally on a PC, using the task scheduler. it asks me the following:

It appears as though arguments have been included in the Program text box. Do you want to run the following program: rundll32.exe

with the following arguments:
user32.dee, lockworkstation

I have tried the input as is, with "" and with '' but none seem to work. Am I missing a step here somewhere?

McKnife

typo?
user32.dll, not .dee
no "" needed.