RE: Force user login after 15 minutes of idle time w/o using a sc reen saver

From: Chris Santerre (csanterre@MerchantsOverseas.com)
Date: 08/21/02 

From: Chris Santerre <csanterre@MerchantsOverseas.com>
To: focus-ms@securityfocus.com
Date: Wed, 21 Aug 2002 13:28:55 -0400

If it is an office environment I remember seeing this cool security product
about a year ago. Employees have a ID badge with a Chip in it. CPU has a
transmitter/receiver hooked to it. When person gets near the computer, it
logs them in. When they leave the range of the cpu for a certain period of
time, it logs them out.

More along the lines of HIGH level security. But hey, You weren't too
descriptive in what you wanted. Try a google on this kind of product as I
can't remember what I had for breakfast, never mind a year ago!

-----Original Message-----
From: Bobby Addison [mailto:bobby@bobbyaddison.com]
Sent: Wednesday, August 21, 2002 10:41 AM
To: focus-ms@securityfocus.com
Subject: RE: Force user login after 15 minutes of idle time w/o using a
screen saver

Hi Paul,

The functions:

LockWorkStation() (as previously mentioned) will lock the workstation on
Windows 2000+, or you can use
ExitWindowsEx(EWX_LOGOFF, NULL) to log the user off (not recommened).

You can build and install the program as a screensaver and Windows notify it
when the specified time period has elapsed.

Like Laura, I'm also curious as to why you would want to use a regular
screensaver.

Bobby

-----Original Message-----
From: Greene Paul [mailto:greene_paul@bah.com]
Sent: Tuesday, August 20, 2002 2:12 PM
To: focus-ms@securityfocus.com
Subject: Force user login after 15 minutes of idle time w/o using a
screen saver

Hello All,

In a Windows NT or 2000 environment, is there a way to implement a
session disconnect *without* using a password protected screen saver?

In other words, if a client does *not* want to implement screen savers,
is there a way to force a user to re-enter their username and password
again if the system were to sit idle for 15 minutes or more?

I found a couple of registry setting that *might* do it, but am not sure
........

HKLM/System/CurrentControlSet/Services/LanManServer/Parameters/EnableForcedL
ogOff
HKLM/System/CurrentControlSet/Services/LanManServer/Parameters/AutoDisconnec
t

Any suggestions?

Paul Greene

Relevant Pages