I have a Windows SBS 2003 domain controller with Windows XP clients, I'm looking for a way to automatically logoff users after a certain period of inactivity. I found one way (http://support.microsoft.com/kb/314999) but it requires configuration on the clients which I don't want to do because they can just remove it.

Is there any other way to accomplish this?

You could configure winexit.scr via a Group Policy setting - that would disallow users from modifying it unless they were administrators with regedit access.

Is there any way to configure the logoff using a GPO without using a local screen saver?

You can configure logon hours without a screensaver, but that won't log off after inactivity (it logs users off or locks them out after a specific hour / minute of day). Otherwise, no, not without using something 3rd party.

OK, Thanks

If you've got the budget, ScriptLogic Desktop Authority does have a logoff agent that can do this, as an FYI. Good product for other things, too.

I'll check it out.

can you use shutdown.exe? that has pleanty of flags to go along with it... it will kill all apps running and also reboot for ya..

I guess the next hurdle would be figuring out how to trigger it... "based on what"

if screensavor on for "howmany mins" than

shutdown.exe -f -r