xp pro hardening

S

sancho

Hi,

I want that on one pc in my domain each time the user log off his profile
will be deleted.

I dont whant to configure it from the DC,I want to do it from the pc. where
can I find this option ?

also I want that after 30 minutes on inactivity the user will be logged off
automaticaly.

thanks
 
T

Torgeir Bakken \(MVP\)

sancho said:
I want that on one pc in my domain each time the user log off
his profile will be deleted.

I dont whant to configure it from the DC,I want to do it from
the pc. where can I find this option ?

Why not put this computer in a separate OU and create a GPO that
does this?

also I want that after 30 minutes on inactivity the user will
be logged off automaticaly.

Two options listed below:

1)
A logout screen saver is an option:

Winexit.scr in the free Win2k3 Server RK kit (will work on
Win2k and WinXP at least).

Windows Server 2003 Resource Kit Tools
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en

(The kit will install on WinXP or later and you can copy only
needed files to other computers)

If the users are non-admins on the local computer you must add Set Value and
Create Subkey permissions for the group Everyone on this registry key:
HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion

How can I use the WinExit screen saver without granting Admin rights?
http://www.jsifaq.com/SUBC/tip1100/rh1179.htm

Logoff Screen Saver Does Not Function in Windows NT
http://support.microsoft.com/default.aspx?scid=kb;EN-US;156677


2)
Another option is to create a scheduled job on each computer that logs
the user off after a set amount of idle time:

http://groups.google.com/[email protected]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top