Peckham said:
I would like to create a policy or script that automatically logs after 50
minutes of use. The 50 minutes would be from the time of logon, not based
on idle session or time of day. Can anyone suggest something?
This is NOT a built-in or easily obtained feature of the OS.
In some ways it runs counter to the design, but I can conceive
of someone actually needing this on an (authenticated) Kiosk
machine or using it much as RRAS has such time limites.
I can also propose a couple of ways to do it "in code" so perhaps
there is a third party product that accomplish it.
My ideas (not proven) include:
Use RRAS, with stations that are "unroutable" otherwise and
take advantage of the RRAS timeouts by forcing the users to
setup a VPN connection which can be controlled as you wish.
(It won't log them out though so that probably isn't the right idea
but I thought it worth mentioning.)
Create a startup script which runs a program that goes into the
background and performs the logon after a timeout. Attach
it based on OU and permission (group) filters.
Create a service that does the same function but that checks the
groups memberships or private database directly.
The third choice is the cleanest but sounds like the most complicated
since you must find someone who can write a service -- but such
SIMPLE services are not that hard to write due to samples that MS
provides.
