Logoff users after idle time?

Discussion in 'Windows Small Business Server' started by Jussi, Apr 6, 2005.

  1. Jussi

    Jussi Guest

    Logoff.scr won't do. I don't want mess up the screen savers users have set
    up.
    Is there a gpo to do this? All I found was about TS sessions.

    Thanks,
    Jussi
     
    Jussi, Apr 6, 2005
    #1
    1. Advertisements

  2. Hello Jussi,

    Thank you for posting to the SBS Newsgroup.

    My understanding is that you want to log off the users when their sessions
    are idled for a period, if I have misunderstood you, please let me know.

    There is no central method such as using Group Policies to force users log
    off their workstations after an idle time. If you do not want to touch the
    client workstations one by one, we can just use Group Policies to force the
    client workstations to lock after a period of time. To do so, please
    perform the following steps:

    1. Click Start->Administrative Tools->Group Policy Management.

    2. Expand Forest, Domains and your domain name, right click on Default
    Domain Policy and choose Edit.

    3. Expand to User Configuration->Administrative Template->Control
    Panel->Display.

    4. On the right pane, enable the "Hide Screen Saver tab" policy so that
    users cannot change his screen savers.

    5. Enable the "Screen Saver" policy so that users will have a screen saver.

    6. Enable the "Screen Saver executable name" policy to specify the screen
    saver's exetable file name. You can type the following exact string to
    specify the Windows Default Screen Saver - Startfield (you can also specify
    other default screen savers):

    %Systemroot%\System32\ssstars.scr

    7. Enable the "Password protect the screen saver" policy so that users will
    be prompted for credentials when they are back.

    8. Enable the "Screen Saver timeout" policy and specify 900 as the value so
    that the idle time will be 15 minutes.

    9. After enabling the policies, close the Policy Editor and then ask all
    the users to log off and then re-log on. These policies should be working.
    Now when users are always from their workstations, the screen saver will
    work after 15 minutes and when someone wants to use the computers, he has
    to enter the original user's credential.

    If you still want to log off users other than locking their workstations,
    you will have to install the Winexit.scr Scren Saver on all your client
    workstations and then configure the policies to use this screen saver. To
    do so:

    1. Download the Windows Server 2003 Resource Kit tools from the following
    link and install it on your SBS 2003 server:

    http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-
    96ee-b18c4790cffd&displaylang=en

    2. After installing the Resource Kit tools, locate the Winexit.scr file and
    then copy it to all your client computers and place it in the
    %Systemroot%\System32 folder.

    3. Log on each client computers, go to the %Systemroot%\System32 folder,
    right click the Winexit.scr file and choose Install to install this screen
    saver.

    4. Re-do the above steps and at step 6, specify the following string as the
    screen saver's executable file:

    %Systemroot%\System32\Winexit.scr

    Thus when users leave their workstations and after 15 minutes, this screen
    saver will run and the userswill be logged off their workstations by this
    scren saver. For more information, please refer to the following Microsoft
    Knowledge Base article:

    314999 HOW TO: Force Users to Quit Programs and Log Off After a Period of
    http://support.microsoft.com/?id=314999

    Hope this information answers your question. I am looking forward to
    hearing from you soon.

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Brandy Nee [MSFT], Apr 7, 2005
    #2
    1. Advertisements

  3. Jussi

    Jussi Guest

    Thanks for your reply Brandy.

    I had hoped to find a way to do this without using screensaver, but I guess
    this is afterall the best way...

    Is it possible to use Scheduled Tasks?
    I noticed that on Settings tab, there's a "Idle time" section. I think you
    could use this to start a logout script after predefined idle time.
    Still there's the problem of how to deploy this to multiple clients.

    Jussi

     
    Jussi, Apr 9, 2005
    #3
  4. Hello Jussi,

    Thank you for posting back.

    As far as I know, this is the only way to log off users after idle time.

    I think the "Scheduled Tasks" does not fully meet your requirement. The
    idle time in Scheduled Task is only valids during the scheduled task
    starts. If the scheduled task has not started, then there is no idle time.
    This idle time only works inside the schedule task time. For example, if we
    have enabled the Idle Time and configured ¡°Only start the task if the
    computer has been idle for at least 10 minutes¡±, the task will be run ONLY
    when both of the following conditions are matched:

    1. The specified time and date are reached

    2. The computer has been idle for at least 10 minutes.

    This Scheduled Tasks is not fully meet your requirement, idle time. It just
    simply starts and off at a certain time. So that is why I say this is the
    one method to achieve.

    Thanks for your time. I am glad to be working with you again.

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Brandy Nee [MSFT], Apr 11, 2005
    #4
  5. Hello Jussi,

    I am not quite clear that the meaning you mentioned "log off users at a
    predetermined time". If a user has already logged on a workstation, then
    you cannot force him/her to log off, but if user has not logged on yet,
    then you can set the log on time for him/her.

    If this is the case that you require, please see the steps below:

    1. Log in the server as Administrator, open Server Management.

    2. Expand Advanced Management\Yourserver.local\MyBusiness\Users\SBSUsers.

    3. On the right panel, select the user who you want to set the log on time.
    You can multi-select.

    4. Right click and select Properties.

    5. Go to Account Tab, click Logon Hours.

    6. Now you can set the log on time for the user, and follow the instruction
    to accomplish.

    Hope this information answers your question. If there is anything unclear,
    I welcome you to post back.

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Brandy Nee [MSFT], Apr 15, 2005
    #5
  6. Jussi

    Jussi Guest

    Ok. Thanks Brandy.
     
    Jussi, Apr 16, 2005
    #6
  7. Hello Jussi,

    Thank you for posting back. May I know whether the issue has being resolved
    or not. I always welcome you.

    Best regards,

    Brandy Nee

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Brandy Nee [MSFT], Apr 18, 2005
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.