Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have mission-critical Windows 7 workstations on our network that must be available to any user at any time, even when it has been locked by a prior user. Thus, we have fast user switching enabled. Unfortunately, it's not unusual for us to have a dozen or more different users logged onto the same machine at the same time, with a corresponding degradation in service.

We've done our best at educating the masses to log off at the end of their shift. But users being users, this does not happen on a consistent basis. Does anyone know of a clean way to force logoff idle users after a certain amount of time has elapsed? I am open to any method that could be deployed/configured via script, GPO, or SCCM.

share|improve this question
add comment

3 Answers

You can setup a GPO to push out a scheduled task that would run this program for all users or if it's just the one system simply make a scheduled task for all users.

share|improve this answer
    
Looks to me as though that script only works if the computer is idle, and not necessarily a user account. –  DKNUCKLES Dec 14 '12 at 3:36
    
From the tests I've ran (Compiling code in Visual Studio, Pulling data from Git, Running a 3DMark) it would lock only if the user didn't provide input. Running it at start up (logon script) will allow you to achieve the result you want by setting the timeout to say 1 hour. That should be a safe amount of time to assume the user is no longer using the system. –  Devin Rawlek Dec 14 '12 at 4:21
    
Thanks Devin. Unfortunately, that site is blocked by my company. Due to the sensitive nature of our network, we are severely restricted on the third party applications that we can use. Ideally, any type of mechanism where we can see how it actually works (i.e. script or source code) would be preferred. –  newmanth Dec 14 '12 at 17:03
add comment

You could try setting everyone's permitted logon hours from 12:00am to 11:59pm (notice the one minute gap), with forcible logoff configured (in gpedit > Computer > Windows Settings > Security Settings > Local Policy > Microsoft network server: Disconnect clients when logon hours expire). That way, everyone who is logged on to any computer will be forcibly logged off at 11:59pm. However, this may not work in your scenario, depending on how unpredictable your user's work times are.

share|improve this answer
add comment

Perhaps the solution from Microsoft may fit your needs: http://support.microsoft.com/default.aspx?scid=KB;en-us;314999&

The idea is to install a screensaver which performs logout.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.