RE: User Log off

From: Jack Mize (JMize@lgc.com)
Date: 05/15/02


From: Jack Mize <JMize@lgc.com>
To: "'Mitchel Chapman'" <mchapman@citadel.com>, "'Tim V(@DZ)'" <iceburn@dangerzone.com>, security-basics@security-focus.com
Date: Wed, 15 May 2002 11:48:27 -0500


With a totally W2k you can set a policy for a locked screen saver to come on
at a set idle time.
-----Original Message-----
From: Mitchel Chapman [mailto:mchapman@citadel.com]
Sent: Tuesday, May 14, 2002 8:09 PM
To: 'Tim V(@DZ)'; security-basics@security-focus.com
Subject: RE: User Log off

Check this out
http://www.citadel.com/netoff.asp

-----Original Message-----
From: Tim V(@DZ) [mailto:iceburn@dangerzone.com]
Sent: Tuesday, May 14, 2002 11:20 AM
To: security-basics@security-focus.com
Subject: User Log off

Does anyone know of group policies, software, configurations that will
automatically log a user off after a specific amount of time?

Basically, people staying logged in is bad for a whole slew of privacy and
security reasons (as you all know). My users seem to have trouble
understanding this. I know I can set a Windows 2000 Group Policy for
"logout automatically" and "time to terminate session" or something like
that, but I'm pretty sure that only applies to terminal services clients. I
searched the web for a while and came up with 12Ghosts Shutdown which is a
small app that "overloads" the shutdown of Windows and among other things
has a inactivity timer. However, in testing, having picky programs (like
Outlook 2002) open will effectively not let 12Ghosts log the user out.

Has anyone else solved this issue with some sort of technology, I'm wearing
thin on user eduacation right now...

 -tim

PS I suppose I should let everyone know that the network is completely
Windows 2000.



Relevant Pages

  • Re: Only "part of a policy" being applied! Update: Additional Info
    ... policy is not correct and is behaving as described below. ... > 2) remove the user from the UNLOCKED IE policy security group ... > 3) force replication ... > 4) have the user log on and verify that he is now getting the LOCKED ...
    (microsoft.public.windows.group_policy)
  • Re: Downlevel machine, AD user, system and group policies
    ... policy be applied to AD user log on to Windows NT 4.0 ... workstation belonging to NT 4.0 domain? ... >policy however user configuration Group Policy settings ... >> If a user with an account on Windows 2000 domain logs ...
    (microsoft.public.win2000.group_policy)
  • Re: GOP with AC
    ... What policy setting isn't working? ... MCSE, MVP Directory Services ... When the user log in to the DC locally, I see how GPO's working, ... but I don't have any local, site or any domain policy in place. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Only "part of a policy" being applied!
    ... >I have a couple policies for Internet Explorer. ... >downloading and prevents users from making setting changes and the other is ... > unlocked policy) gets only part of the policy. ... > 4) have the user log on and verify that he is now getting the LOCKED ...
    (microsoft.public.windows.group_policy)
  • Re: Only "part of a policy" being applied!
    ... >I have a couple policies for Internet Explorer. ... >downloading and prevents users from making setting changes and the other is ... > unlocked policy) gets only part of the policy. ... > 4) have the user log on and verify that he is now getting the LOCKED ...
    (microsoft.public.windows.group_policy)