Active Directory Auto Logoff?

[xchangx]

Is there a setting in Active Directory (Windows 2000 Server Domain Controller) that logs someone off after a certain amount of time? ex. 15 minutes?

Thanks,

Michael Chang

 

[igiveup]

Are you looking to log them off of a Terminal Services session, off the networked shares, or off their workstation that is a member of the domain? Basically which one?

1) Terminal services will let you disconnect a session after a certain period of time has elapsed. Set this up in the users account.

2) If you want to disconnect them from network shares (to keep files from hanging open) you need to use group policy and go to the Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options. In there (depending on the client that you set the group policy up on, XP pro will show different options than 2000 for example) you will find: Microsoft Network Server: Amount of idle time required before suspending session

3) Not sure on this one, and I would like to know also.

 

[Saltin]

In an AD Domain, logon times are set in the properties of the user's account. (Example, user can logon Monday to Friday, 9-5)

Doing this alone however, does not log them off at 5pm. As long as they logon before 5pm, they can stay logged on.


You must create a group policy (or modify and existing one) to change this behavior

The field is Computer Configuration > Windows Settings >Security Settings> Local Policies> Security Options> "Automiatically Log off users when Logon Time Expires".

Set this to enabled.

 

[xchangx]

I manage a lab of about 150+ computers and people constantly leave their machines logged on.

I just want them to be kicked off after 30-45 minues of idle time.

Michael Chang