Security Basics mailing list archives

RE: Automatically locking workstations


From: "Scptt Fullman" <sfullman () opd5 com>
Date: Thu, 9 Oct 2003 11:41:05 -0700

I used the on my network company wide and it worked fine for a while. I
then had to remove it because users began to complain and management
gave it the ax. I also set the screen saver to windows default. It
worked on some computers and not others. It seems like you have taken
the same steps that I did. Good Luck

Scott

Scott Fullman
Information Systems Administrator
B.S., MCSA,  CNE,  NETWORK+, A+
Overton Power Distrcit #5
702-397-2512 Ext. 1045
sfullman () opd5 com

-----Original Message-----
From: Depp, Dennis M. [mailto:deppdm () ornl gov] 
Sent: Thursday, October 09, 2003 6:34 AM
To: Dale Smith; security-basics () securityfocus com
Subject: RE: Automatically locking workstations

Has anyone been able to get this setting to work?  I created a test OU
moved my computer into this ou and set the timeout for 1 minute.  I used
Gpupdate and the local policy MMC snapin to ensure the policy has been
pushed to my PC.  However, my computer does not lock me out.

Dennis Depp 


-----Original Message-----
From: Dale Smith [mailto:d.l.smith () cqu edu au] 
Sent: Wednesday, October 08, 2003 7:07 PM
To: security-basics () securityfocus com

You can do this with a group policy.

COMPUTER CONFIGURATION > WINDOWS SETTINGS > SECURITY SETTINGS > LOCAL
POLICIES > SECURITY OPTIONS> "AMOUNT OF IDLE TIME REQUIRED BEFORE
DISCONNECTING SESSION"

That should do it - it will not really do as it says, just lock the
workstation.

Dale

-----Original Message-----
From: Matthew Crape [mailto:matthew.crape () ofa on ca] 
Sent: Thursday, October 09, 2003 5:39 AM
To: security-basics () securityfocus com
Subject: Automatically locking workstations


Greetings all,
 
    Please excuse me if this question has been asked before (I didn't
see it in the archives), but is there some sort of policy setting that I
can enable in a Win2k AD environment which automatically locks a
computer after a preset timed amount of inactivity? If failing that,
does anyone have any suggestions on how to achieve something similar?
Thanks.
 
    Matt


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: