RE: Force user login after 15 minutes of idle time w/o using a screen saver

From: Benjamin D. Goldman (bgoldman@kipany.com)
Date: 08/20/02 

Date: Tue, 20 Aug 2002 16:21:39 -0400
From: "Benjamin D. Goldman" <bgoldman@kipany.com>
To: <focus-ms@securityfocus.com>

hmm - I have always used the login screensaver, or set sleep times in
the powermanagement and applied a password.

One of the things about forcing a "logout" with windows users, is that
it will have some interesting effects on unsaved work, etc etc.

Its probably a good idea for an admin, but consider the ramifications to
doing this before you force it on users.

-----Original Message-----
From: Greene Paul [mailto:greene_paul@bah.com]
Sent: Tuesday, August 20, 2002 3:12 PM
To: focus-ms@securityfocus.com
Subject: Force user login after 15 minutes of idle time w/o using a
screen saver

Hello All,

In a Windows NT or 2000 environment, is there a way to implement a
session disconnect *without* using a password protected screen saver?

In other words, if a client does *not* want to implement screen savers,
is there a way to force a user to re-enter their username and password
again if the system were to sit idle for 15 minutes or more?

I found a couple of registry setting that *might* do it, but am not sure
........

HKLM/System/CurrentControlSet/Services/LanManServer/Parameters/EnableFor
cedLogOff
HKLM/System/CurrentControlSet/Services/LanManServer/Parameters/AutoDisco
nnect

Any suggestions?

Paul Greene

Relevant Pages

  • RE: [Full-Disclosure] MS Windows Screensaver Privilege Escalation
    ... This vector has been out there since Windows NT has had screen savers, ... This is incorrect, it isn't that it isn't accessible, it is that an admin ... > the login screensaver file with a modified version. ... MS Windows Screensaver Privilege Escalation ...
    (Full-Disclosure)
  • Re: [Full-Disclosure] MS Windows Screensaver Privilege Escalation
    ... a knoppix cd and replaced the current screensaver with my "specially ... this method gets you admin access WITHOUT changing the password, ... > never assign users in Power Users group, ... > MW> privledges or above to change the Login Screensaver, by default, any ...
    (Full-Disclosure)
  • Re: Logoff users after idle time?
    ... I had hoped to find a way to do this without using screensaver, ... > off their workstations after an idle time. ... > Domain Policy and choose Edit. ... Enable the "Screen Saver" policy so that users will have a screen ...
    (microsoft.public.windows.server.sbs)
  • Re: screen saver stopped working
    ... >>> selecting "blank" means no screensaver, ... >> Ken Blake - Microsoft MVP Windows: ... >>>> The screen saver in use is the one named 'blank' in the ... >>>> of savers built in with XP. ...
    (microsoft.public.windowsxp.general)
  • Re: Screensaver not working
    ... You can manually start the screen saver, and add a shortcut to the Quick ... On mine if I go to msconfig/startup and untick "ehtray" my screensaver will ... I,too, had contacted Dell and Microsoft and both wanted to ... working on my main account with Admin rights but worked on the Hp_ ...
    (microsoft.public.windows.mediacenter)