How to logoff inactive users from domain 1

[Theo2k]

Greetings everyone,

Is there a way that I can force inactive users (more the 45 min)logoff from the domain that are attached to? I have had many issues in the past couple of months and I think now is the time to do something about it. I have SBS 2008 and all the nodes are windows 7. GPO is the best solution?

Thanks for any help you can provide.

 

[rsacorp]

There are only two ways I know of:

* Enable the screen saver lock through GPO - not really a log off per se, but at least it will lock clients so they won't get easily hacked.

* Set login/logff times on user account objects (say, 12:30am to 11:30pm), and then set the following GPO:

\Computer Configuration\ Windows Settings\ Security Settings\ Local Policies\ Security Options\ Network Security: Force logoff when logon hours expire

Unfortunately, it doesn't give the 45-minute timeout you need. Haven't seen any other easy way to accomplish this.

Hope that gets you on the right track....

Mike Molenda - TAC Analyst

RSA Corp - Houston, TX
Technical Assistance Center

http://www.rsacorp.com

 

[Theo2k]

Thank you Mike! I've tried the Screen saver option and through GPO and works great!

Thank you again!