Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm looking to create a policy that would allow non-administrator users the ability to log off other non-administrators who have left and have a locked screen. I really don't want to give the users administrator access on the computers. Also, I'm also looking to apply this to a restricted set of computers - not all computers in the domain.

There's something that I can do to obtain this?

share|improve this question
After a long period of our users calling I.T. to have us unlock locked workstations, they started to realize that they could hit the power button to shutdown the PC, then power it back up. End result is the same, with only a few minutes wait for bootup. –  NorbyTheGeek Nov 3 '11 at 16:26
this is the "solution" I gave to the user who complained about it (who is the CEO of the company), but it don't seems very professional... and the computer takes too much to boot, so I'm looking for a better solution. –  ekms Nov 4 '11 at 14:25

1 Answer 1

up vote 1 down vote accepted

We handle this by not allowing shared workstations to be locked. If a user gets up from a shared workstation, he or she has to log out while it is unattended precisely to prevent this.

You can easily configure this option in GPO and apply it only to an OU that has that shared machines in it.

share|improve this answer
seems interesting, so if I could restrict to certain computers to don't lock even when screensaver comes up, and to shutdown after certain time unused, it would do the job. –  ekms Nov 4 '11 at 14:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.