Solved

Using Group Policy to prevent users from locking a computer

Posted on 2016-08-09
3
26 Views
Last Modified: 2016-08-30
We have a server 2008 AD environment where users share workstations but login with unique accounts. It's a sales office and users are constantly logging into different computers for short sessions. This is creating a situation where computers can have over half a dozen different users logged in at the end of the day, and we believe it's causing a problem with some of our software. We are not concerned about data loss as just about everything these users do is in the cloud.

Is it possible to prevent users from locking computers as well as change the idle timeout to force a logout rather than a lock screen?
0
Comment
Question by:medium_grade
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
Manuel Flores earned 500 total points (awarded by participants)
ID: 41749248
To close idle session, seems not be so easy, the session limit group policy is related to RDP sessions.

It is possible using logon scripting ;
https://4sysops.com/archives/automatically-log-off-idle-users-in-windows/

This solution uses a proprietary .exe, beware with that.

Maybe somebody knows a better solution.
0
 
LVL 16

Expert Comment

by:FOX
ID: 41749251
log off after a certain period of inactivity

ref link: https://4sysops.com/archives/automatically-log-off-idle-users-in-windows/

idlelogoff download(add it to a gpo)
ref link: http://www.intelliadmin.com/?p=4439
0
 
LVL 5

Expert Comment

by:Manuel Flores
ID: 41776016
Provided a link with a valid solution to the question.
0

Featured Post

[Webinar] Code, Load, and Grow

Managing multiple websites, servers, applications, and security on a daily basis? Join us for a webinar on May 25th to learn how to simplify administration and management of virtual hosts for IT admins, create a secure environment, and deploy code more effectively and frequently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum editing capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question