Logoff User After Idle Posted by dwirch

Posted On 2017-09-27

Views: 80519

Rating: 5

You must be logged in to rate this post.

Tags: Free Stuff General Blog SystemIdleCheck SysAdmin Tools

Attachments Title Uploaded Size SystemIdleCheck.1.1.0.0.zip 3/19/2020 6:54:00 PM 19,551

Recently, there was a request for our team to implement a new security requirement for workstations. Specifically, If a user remains logged in, but is idle for a specific period of time, that user should be logged out.

After consulting the interwebs for a few minutes, all I could find were hacky solutions using vbscript, PowerShell, task scheduler, or screensavers that may or may not work. I don't need weird, chained together items. I just need something that works.

Documentation

But, you've come here looking for a tool to help you get your goal accomplished. You can download the tool above, and documentation has been listed directly below. The "Fluff" is below that. I highly recommend you read the fluff, though.

I've begun splitting up the documentation for SystemIdleCheck in the hopes of making usage of the program clearer. Below listed are links to the main sections. This will be expanded, as will the accompanying posts for each section, as new functionality is added. This subnav bar will appear at the bottom of each page related to SystemIdleCheck.

Concept

So, I cracked open my favorite Rapid Application Development (RAD) environment, and built something that fits the bill. I had a few requirements, though.

No installation - I don't need a setup program, which makes deployment and update just a bit easier.

No dependencies - Deploying this program to any version of Windows should just work. No support libraries needed, not even .Net.

No interface - The program should run transparently to the user, except when the warning dialog appears.

Configurable idle time - Default to five minutes (300 seconds), but accept any number of seconds.

Configurable warning time - Default to one minute (60 seconds), displays the warning banner and countdown at a configurable time before logoff.

The program that I've put together meets all the criteria above. By utilizing API calls that are standard across the Windows product line, the program will run anywhere. Heck, it might even work in WINE, but I haven't tried it.

Further, no DLLs or other extras need to be distributed with it. No registering of random DLLs or any of that.

Requirements

This program has no outside dependencies, and should run with no issues on Windows XP and higher, including Windows 10 or Windows 2016.

Donate? I really didn't want to do this, but I think I need to at this point. I totally did not expect this program to take off like it did. In order to provide for a more seamless deployment experience, it is necessary to provide an authentic code-signed package. The actual bits won't change. The program will have a certificate attached it, which can verify the validity of the program. What does this mean? In short, you won't get that ugly UAC prompt warning you about software from an untrusted publisher. Sure, you could turn off UAC, but I caution against that. It's dangerous! So, what free software is not free? I won't ever charge for this software. Maybe, in the future, I'll create an enteprise version that might be available for a fee. But for now, this version is free. I am asking for donations to assist in the defraying of cost associated with the purchase of a code signing certificate. That ain't cheap. So, if you're feeling generous... Why not drop me what you feel this program is worth, to my PayPal? I can promise any proceeds received through PayPal will only go towards SIC-related tasks, such as code signing and/or development of newer free versions. If I've convinced you (or begged enough!), you can use this link to send some paper my way. Thanks for understanding.

Update: I've created a short guide which shows how to utilize SIC in an Active Directory domain environment, through the use of Group Policy Objects (GPO). The guide can be found here.

Update: The main executable for SIC is now digitally signed. This should allow you to deploy it without the nasty UAC warning. Give me a shout if you still have issues.

Warning This program will forcefully log off the currently logged on user. It is possible for the user to lose anything they were working on that was not saved. You have been warned. Neither I nor anyone affiliated with this site is responsible for the use or misuse of this software. It is provided free of charge, and there are no requirements for payment of any kind.

About the Author

dwirch has posted a total of 216 articles.

Comments On This Post

Do you have a thought relating to this post? You can post your comment here. If you have an unrelated question, you can use the Q&A section to ask it.

Or you can drop a note to the administrators if you're not sure where you should post.