Force users to log out

[vmaxdlx]

Is there a way to force the user to logout once their login time expires?

I have users set up to only login from the hours of 8 to 5, but if they don't log out, the can still be in the system.

Thanks

 

[pgaliardo]

http://support.microsoft.com/kb/259576/en-us

You can do this via Group Policy

From the above KB:
The following three settings in Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options:
• Automatically log off users when logon time expires
• Rename administrator account
• Rename guest account

 

[58sniper]

You're going to want to notify the users you're going to do this. Otherwise, they'll come in and complain that the document they've been working on for DAYS (and never saved) is gone. Send an email to them, and print a copy for future reference.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[vmaxdlx]

I have that set and it still seems not to work.
I'm kind of new to the whole GP thing. is there a way to check it and see if it should work?

Thanks

 

[pgaliardo]

Make sure that the GP is being Applied to the necessary users. This is on the Security tab of the Policy.

 

[vmaxdlx]

Is there anyway to test at the Workstation end what GP are being applied?

I did all the above and it does not seem to work.

Thanks

 

[dotobi]

At Command Prompt run gpresult. This displays all the Group Policies being applied to the PC.

Also, in case you don't know, gpupdate will make the PC update the group policy instantly.

 

[58sniper]

Keep in mind you can't apply GPOs to machines or users who are in the default OUs. They need to be in other OUs.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[iconSYS1]

As Far as reminding users to log out of the system, I do a nightly reboot and use a tiny batch file to let users know

@echo off

REM Notify users that I am rebooting server
msg * This server will be rebooted in 5 minutes. Please save your work and log out.
REM Run shutdown utility with a delay for users to finish their work

Create the batch file with whatever you want it to say and enable it using task scheduler

 

[ncotton]

You can force it to default OUs, by applying it at Domain level, you can not phyiscally link it to the standard Computer, and User containers...cause they are only containers and not OUs..

Over the weekend, I will be posting some FAQs on here about common Group Policy and Active Directory problems. Such as configuring Group Policy for Domains and minimising replication sizes.

Download the new GPMC for Win 2003 if you haven't already done it. This is the Group Policy Managment Console, and Group Policy Object Editor for Win 2000/2003 domains. There is a tool in there called the Group Policy Modelling Wizard. It is pretty self explanitory, just make sure when it asks you to specify a user and machine...specify a sing user "domain\JBlogs" and a single machine "domain\AcMachine018" rather than groups. This will shows every exact setting that is being applied.

I am also in the process of writing a guide book to accompany Group Policy.

Check back for Updates.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[ncotton]

sorry, forget to post the link to download the GPMC...

Download Microsoft GPMC w. SP1 for Win 2003/XP here

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant