Using Group Policy to prevent users from locking a computer

medium_grade
medium_grade used Ask the Experts™
on
We have a server 2008 AD environment where users share workstations but login with unique accounts. It's a sales office and users are constantly logging into different computers for short sessions. This is creating a situation where computers can have over half a dozen different users logged in at the end of the day, and we believe it's causing a problem with some of our software. We are not concerned about data loss as just about everything these users do is in the cloud.

Is it possible to prevent users from locking computers as well as change the idle timeout to force a logout rather than a lock screen?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
Commented:
To close idle session, seems not be so easy, the session limit group policy is related to RDP sessions.

It is possible using logon scripting ;
https://4sysops.com/archives/automatically-log-off-idle-users-in-windows/

This solution uses a proprietary .exe, beware with that.

Maybe somebody knows a better solution.
FOXActive Directory/Exchange Engineer
Top Expert 2015

Commented:
log off after a certain period of inactivity

ref link: https://4sysops.com/archives/automatically-log-off-idle-users-in-windows/

idlelogoff download(add it to a gpo)
ref link: http://www.intelliadmin.com/?p=4439
Manuel Flores

Commented:
Provided a link with a valid solution to the question.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial