Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Logoff on idle with lock already active
Logoff on idle with lock already active [message #156639] Mon, 22 June 2009 15:34 Go to next message
DavidIT  is currently offline DavidIT  United States
Messages: 10
Registered: June 2009
Junior Member
Hi,

I would like to implement a logoff script or feature to my domain's
user after 15 minutes of inactivity. I've been searching around the
internet and I have found a tool called winexit.scr BUT the problem is I
already use a screen saver to lock stations after 5 minutes of
inactivity so my question is simple :

Is there a way to have both (lock station after 5minutes of inactivity
AND log off session after 15minutes), if yes how ?

Thanks a lot!


--
DavidIT
------------------------------------------------------------ ------------
DavidIT's Profile: http://forums.techarena.in/members/102629.htm
View this thread: http://forums.techarena.in/active-directory/1201873.htm

http://forums.techarena.in
Re: Logoff on idle with lock already active [message #156649 is a reply to message #156639] Tue, 23 June 2009 01:51 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello DavidIT,

Are you aware that you maybe destroy the users work by kicking him out?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> I would like to implement a logoff script or feature to my domain's
> user after 15 minutes of inactivity. I've been searching around the
> internet and I have found a tool called winexit.scr BUT the problem is
> I
> already use a screen saver to lock stations after 5 minutes of
> inactivity so my question is simple :
> Is there a way to have both (lock station after 5minutes of inactivity
> AND log off session after 15minutes), if yes how ?
>
> Thanks a lot!
>
> http://forums.techarena.in
>
Re: Logoff on idle with lock already active [message #156655 is a reply to message #156639] Tue, 23 June 2009 02:51 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
David,

avidIT schrieb:
> I would like to implement a logoff script or feature to my domain's
> user after 15 minutes of inactivity. I've been searching around the
> internet and I have found a tool called winexit.scr BUT the problem is I
> already use a screen saver to lock stations after 5 minutes of
> inactivity so my question is simple :
>
> Is there a way to have both (lock station after 5minutes of inactivity
> AND log off session after 15minutes), if yes how ?

You can't really have two screen savers defined at the same time. Some
issues and suggestions I have are (not sorted on priority or any means):

- as Meinolf said, you simply kill a user's session and destroy open
documents and work. Not a good way to keep the users as your friends :)
- is there a requirement to actually log them off? Can you circumvent
that with other means like hibernating or putting the machine to sleep
(via power options) to save energy?
- Isn't this sort of a user education thing not to leave their machines
with a current logon there?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Logoff on idle with lock already active [message #156667 is a reply to message #156655] Tue, 23 June 2009 08:41 Go to previous messageGo to next message
DavidIT  is currently offline DavidIT  United States
Messages: 10
Registered: June 2009
Junior Member
Meinolf : Yes I am aware that will kill people's documents &
applications.

Florian : The only requirement is that the 15 minutes idle time. We
don't want to put computer to sleep or hibernating. We really want to
log off user after that idle time, the reason is simple : some of our
user sometimes forget to logoff their computer so their computer gets
lock and the next morning another user is not able to use this computer
since it's lock under another user. I don't want to hard-reboot
everytime this happening.

I've found a solution but it's not very convenient (I need to go on all
my computers) : Using shutdown.exe
(http://www.beyondlogic.org/solutions/shutdown/shutdown.htm) via
scheduled task, but I'm not sure it will work for all user on the
computer...

If you can think of something better that would be great.

Thanks,


--
DavidIT
------------------------------------------------------------ ------------
DavidIT's Profile: http://forums.techarena.in/members/102629.htm
View this thread: http://forums.techarena.in/active-directory/1201873.htm

http://forums.techarena.in
Re: Logoff on idle with lock already active [message #156668 is a reply to message #156667] Tue, 23 June 2009 09:35 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

"DavidIT" wrote:
> I've found a solution but it's not very convenient (I need to go on all
> my computers) : Using shutdown.exe
> (http://www.beyondlogic.org/solutions/shutdown/shutdown.htm) via
> scheduled task, but I'm not sure it will work for all user on the
> computer...

I see this is a third party shutdown tool - are you going to use that logoff
function? I could imagine that using the built-in Windows "shutdown" command
with the /c switch (force shutdown and ignore open programs and save
dialogs) could work for you as well. Shutting down the machine over night
had the opportunity to save energy, too.

You can schedule the shutdown using Group Policy Scripts and the AT (though
schtasks is more preferred now) command:
http://support.microsoft.com/kb/317371

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: Logoff on idle with lock already active [message #156676 is a reply to message #156667] Tue, 23 June 2009 10:17 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"DavidIT" <DavidIT.3u8jfa@DoNotSpam.com> wrote in message
news:DavidIT.3u8jfa@DoNotSpam.com...
>
> Meinolf : Yes I am aware that will kill people's documents &
> applications.
>
> Florian : The only requirement is that the 15 minutes idle time. We
> don't want to put computer to sleep or hibernating. We really want to
> log off user after that idle time, the reason is simple : some of our
> user sometimes forget to logoff their computer so their computer gets
> lock and the next morning another user is not able to use this computer
> since it's lock under another user. I don't want to hard-reboot
> everytime this happening.
>
> I've found a solution but it's not very convenient (I need to go on all
> my computers) : Using shutdown.exe
> (http://www.beyondlogic.org/solutions/shutdown/shutdown.htm) via
> scheduled task, but I'm not sure it will work for all user on the
> computer...
>
> If you can think of something better that would be great.
>
> Thanks,
>
> DavidIT

Hello DavidIT

I must agree with the others concerning logging them off. Maybe setting
something like this to schedule after hours to minimize complaints. I could
imagine if they were in the middle of some long running app or important
report, they go to lunch, and find their machine has logged them off, now
having to start over again.

Having worked in many large companies, I know that something like this can
easily get back to the execs, VPs, etc, and consequences wind up occuring
including termination, to the IT staff or the IT person who've implemented
it without approval from the company principles.

Just my two cents... err, $2 with inflation...

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among
responding engineers, as well as to help others benefit from your
resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Re: Logoff on idle with lock already active [message #156875 is a reply to message #156676] Thu, 25 June 2009 08:39 Go to previous messageGo to next message
DavidIT  is currently offline DavidIT  United States
Messages: 10
Registered: June 2009
Junior Member
The users have been warned, and it's a policy here since we have
sensitive information on thoses computers. They all do the same job,
and they can't loose something as all information are applied to a
database in real time.

I have a little question about scheduled task : When I create a task
with administrative privileges, is it applied to all users on the
computer?

Thanks,


--
DavidIT
------------------------------------------------------------ ------------
DavidIT's Profile: http://forums.techarena.in/members/102629.htm
View this thread: http://forums.techarena.in/active-directory/1201873.htm

http://forums.techarena.in
Re: Logoff on idle with lock already active [message #156888 is a reply to message #156875] Thu, 25 June 2009 10:48 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"DavidIT" <DavidIT.3uc8rb@DoNotSpam.com> wrote in message
news:DavidIT.3uc8rb@DoNotSpam.com...
>
> The users have been warned, and it's a policy here since we have
> sensitive information on thoses computers. They all do the same job,
> and they can't loose something as all information are applied to a
> database in real time.
>
> I have a little question about scheduled task : When I create a task
> with administrative privileges, is it applied to all users on the
> computer?
>
> Thanks,

I guess that would depend on the task, but if with administrative
priviledges, it should run no matter who is logged on.

Ace
Re: Logoff on idle with lock already active [message #156898 is a reply to message #156888] Thu, 25 June 2009 14:38 Go to previous messageGo to next message
DavidIT  is currently offline DavidIT  United States
Messages: 10
Registered: June 2009
Junior Member
'Ace Fekay [Microsoft Certified Trainer Wrote:
> ;4481799']"DavidIT" <DavidIT.3uc8rb@DoNotSpam.com> wrote in message
> news:DavidIT.3uc8rb@DoNotSpam.com...
> >
> > The users have been warned, and it's a policy here since we have
> > sensitive information on thoses computers. They all do the same
> job,
> > and they can't loose something as all information are applied to a
> > database in real time.
> >
> > I have a little question about scheduled task : When I create a task
> > with administrative privileges, is it applied to all users on the
> > computer?
> >
> > Thanks,
>
> I guess that would depend on the task, but if with administrative
> priviledges, it should run no matter who is logged on.
>
> Ace

I created the scheduled task under domain administrator account, it
worked. But when I log to a domain user the scheduled task isn't there,
is there a way to make a scheduled task for all users on a specific
computer?

Thanks,


--
DavidIT
------------------------------------------------------------ ------------
DavidIT's Profile: http://forums.techarena.in/members/102629.htm
View this thread: http://forums.techarena.in/active-directory/1201873.htm

http://forums.techarena.in
Re: Logoff on idle with lock already active [message #156903 is a reply to message #156898] Thu, 25 June 2009 19:47 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"DavidIT" <DavidIT.3ucpfb@DoNotSpam.com> wrote in message
news:DavidIT.3ucpfb@DoNotSpam.com...
>
> I created the scheduled task under domain administrator account, it
> worked. But when I log to a domain user the scheduled task isn't there,
> is there a way to make a scheduled task for all users on a specific
> computer?
>
> Thanks,
>
>

I've never used a scheduled task as you are using it. Basically I do know
that if the task is scheduled with credentials, with permissions to allow it
to run with any user logged on. Ssearching Google, I've found a few links,
one of which that may help is the following.

Task Scheduler and security
http://technet.microsoft.com/en-us/library/cc785125(WS.10).aspx

Also, this is a good read:
http://www.experts-exchange.com/OS/Miscellaneous/Q_21795355. html

If you can't get into the link, here is a copy/paste of the relevant post in
that thread:

/begin quote:
samb39:
If you don't have a password on your account, scheduled tasks will not run.
I know that's true, I've seen that happen.

Here are a few threads which suggest somewhat weird solutions, such as
creating the task in the command line, or changing privileges for the task's
account. I have not tried those solutions.

This guy solved the problem by using this command-line:

SCHTASKS /Create /S \\"COMPUTERNAME" /U DOMAIN\administrator /P "admin
password" /RU DOMAIN\administrator /RP "admin password" /SC DAILY /ST
00:00:00 /TN "Task Name" /TR "File Path to Task"

http://www.tek-tips.com/viewthread.cfm?qid=1195536&page= 1

This guy added the "Access this computer from the network" permission to the
user account that will run the scheduled task in Local Security Policy

http://www.kbalertz.com/Feedback_884573.aspx
/end quote


I hope that helps.

Ace
Previous Topic:Do I need a CA server?
Next Topic:AD Site Replication links for redundant VPN's
Goto Forum:
  


Current Time: Sat Oct 21 19:12:12 EDT 2017

Total time taken to generate the page: 0.03001 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software