We help IT Professionals succeed at work.

Using Group Policy to prevent users from locking a computer

We have a server 2008 AD environment where users share workstations but login with unique accounts. It's a sales office and users are constantly logging into different computers for short sessions. This is creating a situation where computers can have over half a dozen different users logged in at the end of the day, and we believe it's causing a problem with some of our software. We are not concerned about data loss as just about everything these users do is in the cloud.

Is it possible to prevent users from locking computers as well as change the idle timeout to force a logout rather than a lock screen?
Watch Question

To close idle session, seems not be so easy, the session limit group policy is related to RDP sessions.

It is possible using logon scripting ;

This solution uses a proprietary .exe, beware with that.

Maybe somebody knows a better solution.
FOXActive Directory/Exchange Engineer
Top Expert 2015

log off after a certain period of inactivity

ref link: https://4sysops.com/archives/automatically-log-off-idle-users-in-windows/

idlelogoff download(add it to a gpo)
ref link: http://www.intelliadmin.com/?p=4439
Provided a link with a valid solution to the question.