<div>
@Wayne88<br />
Thanks for the information. I was going to go with 30 minute inactivity, but I learned that there are users that want 1 minute, 10 minutes ... it varies.<br />
Can I exclude certain workstations from the 30 minute policy?
</div>


@Wayne88
Thanks for the information. I was going to go with 30 minute inactivity, but I learned that there are users that want 1 minute, 10 minutes ... it varies.
Can I exclude certain workstations from the 30 minute policy?

<div>
Anytime sglee, yes you can exclude certain workstations from any policy but then you will have to create a group for that user as well as a separate policy for them or don't include that group to the main policy.
</div>


Anytime sglee, yes you can exclude certain workstations from any policy but then you will have to create a group for that user as well as a separate policy for them or don't include that group to the main policy.

<div>
Can I create two groups:<br />
Group1: screen lockout after 30 minutes inactivity<br />
Group2: no lockout enforcement from DC. Allow each individual user/owner of the PC to do whatever they want to do
</div>


Can I create two groups:
Group1: screen lockout after 30 minutes inactivity
Group2: no lockout enforcement from DC. Allow each individual user/owner of the PC to do whatever they want to do

<div>
Sure, or alternatively just leave the users you don't want to apply the policy to from Group1. &nbsp;The policy is only effective for users in Group1 inclusive.
</div>


Sure, or alternatively just leave the users you don't want to apply the policy to from Group1.  The policy is only effective for users in Group1 inclusive.

<div>
<div class="content wysiwyg-content">
Hi,<br />
&nbsp; <br />
&nbsp;I have SBS2011/DC network and like to know if there is a way to create a network policy that logs users out after so many minutes of inactivity. I know I can go around each workstation PC on the network and manually do it, but I would prefer to do it on the domain controller.<br />
<br />
Thanks.
</div>
</div>


Hi,
  
 I have SBS2011/DC network and like to know if there is a way to create a network policy that logs users out after so many minutes of inactivity. I know I can go around each workstation PC on the network and manually do it, but I would prefer to do it on the domain controller.

Thanks.

Network Policy to lock out from idle session

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Network Management involves issues that are independent of specific hardware or software, including email policies, upgrade planning, backup scheduling and working with managed service providers for Desktop-As-A-Service (DaaS), Software-As-A-Service (SaaS) and the like through the use of tools, coupled with manufacturer standards, best practice guidelines, policies and procedures plus all other relevant documentation. Network management also includes monitoring, alerting and reporting, management reporting, planning for device or service updates, the backup of configurations, the setting of key performance indicators and measures (KPIs/KPMs), associated service level agreements and problem records as part of the IT Service Management (ITSM) framework.