auto logoff after inactivity in domain

[larynx]

I have a Windows SBS 2003 domain controller with Windows XP clients, I'm looking for a way to automatically logoff users after a certain period of inactivity. I found one way (http://support.microsoft.com/kb/314999) but it requires configuration on the clients which I don't want to do because they can just remove it.

Is there any other way to accomplish this?

[cluberti]

You could configure winexit.scr via a Group Policy setting - that would disallow users from modifying it unless they were administrators with regedit access.

[larynx]

Is there any way to configure the logoff using a GPO without using a local screen saver?

[cluberti]

You can configure logon hours without a screensaver, but that won't log off after inactivity (it logs users off or locks them out after a specific hour / minute of day). Otherwise, no, not without using something 3rd party.

[larynx]

OK, Thanks

[cluberti]

If you've got the budget, ScriptLogic Desktop Authority does have a logoff agent that can do this, as an FYI. Good product for other things, too.

[larynx]

I'll check it out.

[annakin108]

can you use shutdown.exe? that has pleanty of flags to go along with it... it will kill all apps running and also reboot for ya..

I guess the next hurdle would be figuring out how to trigger it... "based on what"

if screensavor on for "howmany mins" than

shutdown.exe -f -r