RE: Force user login after 15 minutes of idle time w/o using a sc reen saver

From: Tyson Leslie (Leslie.Tyson@colteng.com)
Date: 08/21/02


From: Tyson Leslie <Leslie.Tyson@colteng.com>
To: "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Date: Wed, 21 Aug 2002 09:25:47 -0600


"%windir%\System32\rundll32.exe user32.dll, LockWorkStation"

Except, you get the same functionality by using a password protected screen
saver. Perhaps we can get some reasoning behind not using screen savers?
(Why re-invent the wheel?...)

        TL

-----Original Message-----
From: Kyle Davis [mailto:kdavis@healthvision.com]
Sent: August 20, 2002 2:39 PM
To: 'focus-ms@securityfocus.com'
Subject: RE: Force user login after 15 minutes of idle time w/o using a
sc reen saver

There's an API call on Win2K called "LockWorkStation" (exported by
User32.dll) you can call. It can't be called from a server, it can only be
called from an application running in the user's context... so, you'd have
to write a hidden app that launches at Startup and watches for Idle time.
(And, that's the hard part.)

The function isn't available on NT or Win9x, only Win2K or higher.
 ____________________________
( Kyle Davis, Consulting Engineer
( HEALTHvision Technology Group: More. Faster.
( http://www.healthvision.com
  

> -----Original Message-----
> From: Greene Paul [mailto:greene_paul@bah.com]
> Sent: Tuesday, August 20, 2002 2:12 PM
> To: focus-ms@securityfocus.com
> Subject: Force user login after 15 minutes of idle time w/o
> using a screen saver
>
>
> Hello All,
>
> In a Windows NT or 2000 environment, is there a way to
> implement a session disconnect *without* using a password
> protected screen saver?
>
> In other words, if a client does *not* want to implement
> screen savers, is there a way to force a user to re-enter
> their username and password again if the system were to sit
> idle for 15 minutes or more?
>
> I found a couple of registry setting that *might* do it, but
> am not sure ........
>
> HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> /EnableForcedLogOff
> HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> /AutoDisconnect
>
> Any suggestions?
>
> Paul Greene
>