Or you could create a scheduled task on those systems using the following options (GPP can create the scheduled task for you): 1. Run the "shutdown -l -f -t 00" command which would force an immediate logoff 2. Run only if logged on 3. Run every XX minutes during non-business hours (6:00PM - 7:00AM) a. Schedule Task: Daily b. Start Time: 6:00PM c. Every 1 days d. Advanced i. Repeat task every XX minutes ii. Duration: 13 hours 4. Only start the task if the computer has been idle for XX minutes. Something like that "should" work, but I would do plenty of testing before you put it into production. Regards, Jamie Nelson | Operations Consultant | BI&T Infrastructure-Intel | Devon Energy Corporation | Work: 405.552.8054 | Mobile: 405.200.8088 | http://www.dvn.com <http://www.dvn.com/> From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Alan & Margaret Sent: Friday, September 12, 2008 2:03 AM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Re: Logoff Users after office with Winexit.scr Hi Pankaj, Not sure if it is the best solution, or worth the effort but Group Preferences has some features that could work. Firstly you can create a preference that copies down the registry Key that controls the Screensaver (Software\Policies\Microsoft\Windows\Control Panel\Desktop ) and set it to your "Normal" screensaver. You can then set a second preference that has a time filter on it so that it only runs between 6.00 pm and 7.00 a.m that sets the same registry key to Winexit.scr. The only problem could be that preference processing doesn't do a "refresh" of the desktop so it may not pick up the change. Of course it will only reset when Group Policy Processing runs, so it will reset sometime between 7.00 and 8.00. Preferences can run on your environment, but you need to install it and you will need a Vista machine to manage it. Alan Cuthbertson Policy Management Software (Now with ADMX and Preference support):- http://www.sysprosoft.com/index.php?ref=activedir&f=pol_summary.shtml ADM Template Editor(Now with ADMX support):- http://www.sysprosoft.com/index.php?ref=activedir&f=adm_summary.shtml Policy Log Reporter(Free) http://www.sysprosoft.com/index.php?ref=activedir&f=policyreporter.shtml ________________________________ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Pankaj Bhakta Sent: Friday, 12 September 2008 2:39 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Logoff Users after office with Winexit.scr Hi All, I am having a bit of problem with few users who always forget to log off after office hours. I wish to log them off after 2 hours of inactivity after office hours. I have read about the Winexit.scr and tested it on a test environment. It works alright but I have a domain based GPO that invokes the password protected screen saver after 10 minutes of inactivity. I cannot figure out how both objectives can be achieved ie during office hours if a desktop is running with 10 minutes of inactivity then it will get locked with the password protected screensaver but after office hours even if the password protected screen saver become active after 10 minutes of inactivity, the Winexit.scr will throw its muscle and log off the user. Our environment is Win 2K3 domain and XP SP2 desktops and laptops. Regards, Pankaj Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of all or any portion of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system.