RE: Workstation Shutdown / Logoff Policy

We encourage our users to log off their workstations at night -- rather
than lock them or shut down -- so that updates can be applied via WSUS
(and also so our AV scans can run at night with as much proc power they
want).

Bill

William Bova, MCSE
University of Texas at Austin
b.bova@xxxxxxxxxxxxxx


-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Thursday, August 17, 2006 10:55 AM
To: Focus-MS
Subject: Re: Workstation Shutdown / Logoff Policy :VSMail mx1

So, from the looks of most of the replies, folks are counting on
GPO/WSUS to enforce screenlock/updating, but rely on the end-user to
restart their systems.

Anyone actually forcing reboots?

t


On 8/16/06 12:18 PM, "Jamie Fullerton" <Jamie.Fullerton@xxxxxxxx>
spoketh to
all:

Our current policy is that all stand-alone workstations have their
screensaver set to a 10 minute screensaver with the password required
to log back into the system. We encourage people to power off their
machines at night but we don't become the Power Gestapo in enforcing
this.

Our WSUS is configured to redeploy an update if the client is powered
down during the initial push of an update (normally an early morning
hour with little other traffic on the network).

On our Citrix clients all clients have their session terminated after
three hours of inactivity. This ensures that all clients are logged
out at the end of the business day. If for whatever reason they are
not fully logged off the servers, the Citrix servers themselves are
rebooted once a day as well.

----------------------------------------------------------------------
-----
----------------------------------------------------------------------
-----






------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Re: HIPPA Security and GPO Objects
    ... You can use group policy to control when Win 2k and XP client's screensaver ... Pre Win 2k clients will not use group policy. ... > implement some measures to protect data and secure our workstations. ...
    (microsoft.public.security)
  • Re: Sudden Issues with DHCP & Remote Access
    ... function and when i went to run the wizard, found that the server could not ... In one fix there were instructions to change the path of the clientapps ... then re-run CEICW and reboot the workstations. ... will be assigned to dial in clients. ...
    (microsoft.public.windows.server.sbs)
  • Re: Passive/Active scanning information
    ... beacon frame format, and how is modeled information offered by it. ... TIM broadcasts are used for power management, ... Only clients that have power save mode ... Trying to seperate valid incoming data from ...
    (alt.internet.wireless)
  • Re: Workstation Shutdown / Logoff Policy :VSMail mx1
    ... I utilise WSUS for installing the updates overnight and force a reboot early mornings before users get in. ... We force all workstations and laptops to screensaver and lock after 10 minutes, drives them nuts but we have had times when it wasnt in force and they got burnt. ... On our Citrix clients all clients have their session terminated after ... the Citrix servers themselves are rebooted ...
    (Focus-Microsoft)
  • Re: SBS 2003 no client internet access
    ... How would he go about un-joining the workstations from the domain? ... >>>You said the SBS is only used as a File and Printer server. ... >> I have replaced the clients with XP Pro clients, ... >> Internet firewall from the client.. ...
    (microsoft.public.windows.server.sbs)