Re: Lock Account/Logoff Time-out

From: Ross Smith (junk_at_hotmail.com)
Date: 12/10/04 

Date: Fri, 10 Dec 2004 07:36:57 -0000

Hi Todd,

Did you miss the last part of my post? I was pointing out that the windows
logon screensaver can be used to force users to log off after a period of
inactivity. You could change your network policy to leave users log on but
configure the screensaver for all normal users.

It's a bodge, but I think it might work. You should even be able to deploy
the screen saver settings via group policy, but with much finer control than
the logon policies.

Ross

"Todd" <Todd@discussions.microsoft.com> wrote in message
news:2BE383E6-2FB6-4B9D-93E3-280816EE3E31@microsoft.com...
> Thanks for the posts: Lanwench - I too expect users tolo out every
night -
> hence my problem with this application. I have checked with the vendor
and
> verified that it can't be run as a service - the application is a project
> management add-on to Quickbooks. It's actually a really neat program, but
> obviously causes security concerns. Ross - Unfortunately, with SBS 2000,
you
> can only have 1 DC on the network.
> I think my best course of action is to modify the Group Policy settings
for
> the entire network to allow all users to indefinately be logged on. Would
> you agree? I would actually prefer to modify settings so user accounts
could
> be indefinatlely locked instead. Either way, I don't know where/how to
> configure this. Any help is greatly appreciated. I also can't seem to
locate
> the newsgroup for group policy. Thanks again.
> Todd
> "Ross Smith" wrote:
>
> > Hmm... was going to reply 'No way around it that I know of.', but I did
some
> > digging and I think I've got a couple of ideas for you.
> >
> > First of all, don't even try to look for a workaround for that
individual
> > account. Even in Windows Server 2003, there can only be one set of
account
> > policies per domain. If this is the way that program needs to run, you
> > *have* to change your account policies to support it.
> >
> > I suppose in theory you could create a new domain within the same forest
and
> > create an admin account for this service under that domain. It's not
> > something I've ever put into practice, you would need another DC for the
> > second domain and I've not used SBS 2000 so I couldn't advise you on
whether
> > that's supported or not. I think this would work but I would advise you
to
> > do plenty of research yourself if you want to try this route.
> >
> > A better way is to change your policies to support this software and
then
> > re-evaluate the security on the rest of your network, to see if there is
an
> > alternative policy that could have the same effect. I vaguely
remembered
> > someone using screensavers to achieve this and found the following
article
> > on the knowledgebase:
> >
> > How To Force Users to Quit Programs and Log Off After a Period of
Inactivity
> > in Windows XP
> > http://support.microsoft.com/default.aspx?scid=kb;en-us;314999&sd=tech
> >
> > Hope that helps, can you reply to the board and let us know how you get
on.
> >
> > Ross Smith MCP, MCSA
> >
> >
> > "Todd" <Todd@discussions.microsoft.com> wrote in message
> > news:D3025B9E-5142-4030-97C9-9CF86B461C3B@microsoft.com...
> > > I have a SBS 2000 network. Default settings in my domain log users
off
> > > (either locked or idle) after about 24 hours. We recently installed
an
> > > application that needs to be running 24/7 with a user account logged
on
> > with
> > > admin rights. For security purposes, I would prefer to log the user
on
> > and
> > > lock the account. The problem is after 24 hours, the user is
> > automatically
> > > logged off; therefore shutting down the application. My questions is:
> > How
> > > can modify the GP settings so user accounts can be locked
indefinately? I
> > > appreciate your help.
> >
> >
> >

Relevant Pages

  • Re: Group policy screensaver - turn it off!
    ... how will the OP have permission to those keys? ... I have a rather restricitve group policy set on my machine. ... breaks whenever the screensaver kicks in. ... Const SPI_SETSCREENSAVEACTIVE = 17 ...
    (microsoft.public.excel.programming)
  • Re: screensaver password on a 2000 server
    ... You can take use of the follow policies to set a screensaver and a password. ... Hide Screen Saver tab ... user's Group Policy objects determine which user settings apply. ...
    (microsoft.public.win2000.group_policy)
  • RE: Blocking Screensaver from Appearing
    ... We are using a group policy, so I will approach it as resetting ... these registry keys. ... >> I have been given an unusual task to create a Windows Service to do something ... >> periodically to make the screensaver timer reset. ...
    (microsoft.public.dotnet.general)
  • Re: Where are my rights???
    ... It sounds like screen saver is being enforced by a domain/OU Group Policy ... settings are enforced there and the Group Policy that applied the setting. ... also a bad idea to have those users be local administrators unless there is ... cannot change things like the screensaver. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Re: ScreenSaver Limited Choice
    ... See tip 9315 » How can I use a logon script to force users to configure any screen saver they wish? ... One way I can think of is to force the screensaver to look at a read-only directory where the standard screensaver files reside. ... Instead of putting the .scr files on the local drive, can we put the .scr files on the network drives? ...
    (microsoft.public.windows.group_policy)