Group Policy - Need assistance with Lock and Logoff

SouthSeaPirate

Educating the masses is not enough. I routinely see users logged into systems with no one physically at the station; sometimes with personal or restricted information still on the screen. In other areas where stations are shared people will remain logged in and the next shift end up using the previous login.

I would love to be able to lock idle user after so much time has passed and from here, log off locked user after so much time has passed.

I also want to be able to remove shutdown from certain systems, but unfortunately this is a user setting. I need a computer configuration solution.

Appreciate any help!

Server 2008 R2 and Win7 Pro environment.

gc8dc95

You can use Computer Config > Windows Settings > Security Settings > Local Policies > Security Options > Interactive Logon: Machine Inactivity Limit to trigger the locking of the system. I dont know of anyway to force logoff with GPO, but you can take a look at this method Forcing Afterhours User Logoffs - Ask the Directory Services Team - Site Home - TechNet Blogs

SouthSeaPirate

gc8dc95 wrote: »

You can use Computer Config > Windows Settings > Security Settings > Local Policies > Security Options > Interactive Logon: Machine Inactivity Limit to trigger the locking of the system. I dont know of anyway to force logoff with GPO, but you can take a look at this method Forcing Afterhours User Logoffs - Ask the Directory Services Team - Site Home - TechNet Blogs

Unfortunately we are 24 hours, so many users logoff would vary. Also, many of the systems in question are shared.
This seems like something that should be straight forward.