RE: Force user login after 15 minutes of idle time w/o using a sc reen saver

From: Kyle Davis (kdavis@healthvision.com)
Date: 08/20/02 

From: Kyle Davis <kdavis@healthvision.com>
To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Tue, 20 Aug 2002 15:39:29 -0500

There's an API call on Win2K called "LockWorkStation" (exported by
User32.dll) you can call. It can't be called from a server, it can only be
called from an application running in the user's context... so, you'd have
to write a hidden app that launches at Startup and watches for Idle time.
(And, that's the hard part.)

The function isn't available on NT or Win9x, only Win2K or higher.
 ____________________________
( Kyle Davis, Consulting Engineer
( HEALTHvision Technology Group: More. Faster.
( http://www.healthvision.com
  

> -----Original Message-----
> From: Greene Paul [mailto:greene_paul@bah.com]
> Sent: Tuesday, August 20, 2002 2:12 PM
> To: focus-ms@securityfocus.com
> Subject: Force user login after 15 minutes of idle time w/o
> using a screen saver
>
>
> Hello All,
>
> In a Windows NT or 2000 environment, is there a way to
> implement a session disconnect *without* using a password
> protected screen saver?
>
> In other words, if a client does *not* want to implement
> screen savers, is there a way to force a user to re-enter
> their username and password again if the system were to sit
> idle for 15 minutes or more?
>
> I found a couple of registry setting that *might* do it, but
> am not sure ........
>
> HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> /EnableForcedLogOff
> HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> /AutoDisconnect
>
> Any suggestions?
>
> Paul Greene
>

Relevant Pages

  • Re: Force user login after 15 minutes of idle time w/o using a screen saver
    ... Those settings won't do it. ... Force user login after 15 minutes of idle time w/o using a screen ... > session disconnect *without* using a password protected screen saver? ...
    (Focus-Microsoft)
  • Re: Timed lockout set by Admin in Work Group
    ... the systems administrator has set our work group to lock out ... > after 30 minutes of idle time. ... You won't be able to change your screen saver or set the timeout and this is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ctrl-alt-delete key does not work
    ... When you mean locked up I assume that after a period of idle time the ... computer locks and you have to enter a password to gain access again?? ... If that is so it sounds like you do have a screen saver configured to lock ... If that does not help try using local Group ...
    (microsoft.public.win2000.security)
  • forgot Admin pwd!
    ... >I know this may sound stupid..but I built this Win2k ... INSTEAD OF THE THE SCREEN SAVER RUNNING YOU SHOULD FIND ... THAT YOU WILL HAVE THE MMC CONSOLE UP AND RUNNING WITH ...
    (microsoft.public.win2000.security)
  • Re: Windows Server 2003 autolock
    ... The screen saver by default in Windows 2003 is configured to lock the ... computer after 10 minutes of idle time. ...
    (microsoft.public.security)