Re: Force user login after 15 minutes of idle time w/o using a screen saver

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 08/20/02 

From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: "Kyle Davis" <kdavis@healthvision.com>, <focus-ms@securityfocus.com>
Date: Tue, 20 Aug 2002 16:59:45 -0400

However, a password protected screen saver performs exactly the same
functionality without having to code anything. I'm a huge fan of the
LockWorkStation function and have a shortcut to it in my taskbar, but I am
having a hard time understanding why there is a desire to take something
that is already built into the OS and easily configured, but instead make it
difficult and risky.

BTW, user32.dll has lots of nifty functionality. :-)

Laura
----- Original Message -----
From: "Kyle Davis" <kdavis@healthvision.com>
To: <focus-ms@securityfocus.com>
Sent: Tuesday, August 20, 2002 4:39 PM
Subject: RE: Force user login after 15 minutes of idle time w/o using a
screen saver

> There's an API call on Win2K called "LockWorkStation" (exported by
> User32.dll) you can call. It can't be called from a server, it can only
be
> called from an application running in the user's context... so, you'd have
> to write a hidden app that launches at Startup and watches for Idle time.
> (And, that's the hard part.)
>
> The function isn't available on NT or Win9x, only Win2K or higher.
> ____________________________
> ( Kyle Davis, Consulting Engineer
> ( HEALTHvision Technology Group: More. Faster.
> ( http://www.healthvision.com
>
>
>
>
> > -----Original Message-----
> > From: Greene Paul [mailto:greene_paul@bah.com]
> > Sent: Tuesday, August 20, 2002 2:12 PM
> > To: focus-ms@securityfocus.com
> > Subject: Force user login after 15 minutes of idle time w/o
> > using a screen saver
> >
> >
> > Hello All,
> >
> > In a Windows NT or 2000 environment, is there a way to
> > implement a session disconnect *without* using a password
> > protected screen saver?
> >
> > In other words, if a client does *not* want to implement
> > screen savers, is there a way to force a user to re-enter
> > their username and password again if the system were to sit
> > idle for 15 minutes or more?
> >
> > I found a couple of registry setting that *might* do it, but
> > am not sure ........
> >
> > HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> > /EnableForcedLogOff
> > HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
> > /AutoDisconnect
> >
> > Any suggestions?
> >
> > Paul Greene
> >

Relevant Pages

  • Re: Screensaver
    ... Screen Saver Does Not Start When Scheduled ... > or maybe a Registry tweak that will restore the screensaver's functionality ... > security updates and a graphics program. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: Timed lockout set by Admin in Work Group
    ... the systems administrator has set our work group to lock out ... > after 30 minutes of idle time. ... You won't be able to change your screen saver or set the timeout and this is ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ctrl-alt-delete key does not work
    ... When you mean locked up I assume that after a period of idle time the ... computer locks and you have to enter a password to gain access again?? ... If that is so it sounds like you do have a screen saver configured to lock ... If that does not help try using local Group ...
    (microsoft.public.win2000.security)
  • RE: Force user login after 15 minutes of idle time w/o using a sc reen saver
    ... to write a hidden app that launches at Startup and watches for Idle time. ... The function isn't available on NT or Win9x, only Win2K or higher. ... Force user login after 15 minutes of idle time w/o ... > protected screen saver? ...
    (Focus-Microsoft)
  • Re: Force user login after 15 minutes of idle time w/o using a screen saver
    ... Those settings won't do it. ... Force user login after 15 minutes of idle time w/o using a screen ... > session disconnect *without* using a password protected screen saver? ...
    (Focus-Microsoft)