• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Software to time and lock user out of computer

Joined
Apr 14, 2012
Messages
115 (0.03/day)
Processor Intel Core i7 5930K
Motherboard ASUS Rampage V Extreme [BIOS 1502]
Cooling Corsair H110i GT
Memory Corsair Dominator Platinum - 32GB (4x8GB) @ 2666Mhz C15
Video Card(s) NVIDIA GeForce GTX 980 Ti
Storage Samsung SM951 M.2 512GB
Display(s) ASUS RoG PG278Q
Case Corsair Obsidian 900D
Audio Device(s) Onboard Sound
Power Supply Corsair AX1500i
Mouse Mad Catz R.A.T. 9
Keyboard Logitech G19 v1
Software Windows 7 Professional x64
So we have an employee lounge where we want employees (domain users) to be able to log into the computer and be able to have 2-hour use time (and have a visible timer on the screen). Once the two hours are up, they get logged out of the computer automatically and become unable to log-in for at least two (or three or four) hours.

Is there any software that will let me do this? Most parental controls or coffee web software are not necesarrily what I need.
 
Joined
Jan 5, 2006
Messages
17,825 (2.67/day)
System Name AlderLake / Laptop
Processor Intel i7 12700K P-Cores @ 5Ghz / Intel i3 7100U
Motherboard Gigabyte Z690 Aorus Master / HP 83A3 (U3E1)
Cooling Noctua NH-U12A 2 fans + Thermal Grizzly Kryonaut Extreme + 5 case fans / Fan
Memory 32GB DDR5 Corsair Dominator Platinum RGB 6000MHz CL36 / 8GB DDR4 HyperX CL13
Video Card(s) MSI RTX 2070 Super Gaming X Trio / Intel HD620
Storage Samsung 980 Pro 1TB + 970 Evo 500GB + 850 Pro 512GB + 860 Evo 1TB x2 / Samsung 256GB M.2 SSD
Display(s) 23.8" Dell S2417DG 165Hz G-Sync 1440p / 14" 1080p IPS Glossy
Case Be quiet! Silent Base 600 - Window / HP Pavilion
Audio Device(s) Panasonic SA-PMX94 / Realtek onboard + B&O speaker system / Harman Kardon Go + Play / Logitech G533
Power Supply Seasonic Focus Plus Gold 750W / Powerbrick
Mouse Logitech MX Anywhere 2 Laser wireless / Logitech M330 wireless
Keyboard RAPOO E9270P Black 5GHz wireless / HP backlit
Software Windows 11 / Windows 10
Benchmark Scores Cinebench R23 (Single Core) 1936 @ stock Cinebench R23 (Multi Core) 23006 @ stock
Hmm, I should use this for myself sometime.. :D
 
Joined
Jan 17, 2010
Messages
12,280 (2.36/day)
Location
Oregon
System Name Juliette // HTPC
Processor Intel i7 9700K // AMD Ryzen 5 5600G
Motherboard ASUS Prime Z390X-A // ASRock B550 ITX-AC
Cooling Noctua NH-U12 Black // Stock
Memory Corsair DDR4 3600 32gb //G.SKILL Trident Z Royal Series 16GB (2 x 8GB) 3600
Video Card(s) ASUS RTX4070 OC// GTX 1650
Storage Samsung 970 EVO NVMe 1Tb, Intel 665p Series M.2 2280 1TB // Samsung 1Tb SSD
Display(s) ASUS VP348QGL 34" Quad HD 3440 x 1440 // 55" LG 4K SK8000 Series
Case Seasonic SYNCRO Q7// Silverstone Granada GD05
Audio Device(s) Focusrite Scarlett 4i4 // HDMI to Samsung HW-R650 sound bar
Power Supply Seasonic SYNCRO 750 W // CORSAIR Vengeance 650M
Mouse Cooler Master MM710 53G
Keyboard Logitech 920-009300 G512 SE
Software Windows 10 Pro // Windows 10 Pro
I'm wondering why? Why not just make a policy and check on them. First offence letter of expectation and so on

If would suck to get logged off when your in the middle of something

We have a use policy. Sometimes a manager would come to staff meeting and say. Someone was watching the comity central for 3 hours last night
 
Last edited:

Kursah

Super Moderator
Staff member
Joined
Oct 15, 2006
Messages
14,673 (2.29/day)
Location
Missoula, MT, USA
System Name Kursah's Gaming Rig 2018 (2022 Upgrade) - Ryzen+ Edition | Gaming Laptop (Lenovo Legion 5i Pro 2022)
Processor R7 5800X @ Stock | i7 12700H @ Stock
Motherboard Asus ROG Strix X370-F Gaming BIOS 6203| Legion 5i Pro NM-E231
Cooling Noctua NH-U14S Push-Pull + NT-H1 | Stock Cooling
Memory TEAMGROUP T-Force Vulcan Z 32GB (2x16) DDR4 4000 @ 3600 18-20-20-42 1.35v | 32GB DDR5 4800 (2x16)
Video Card(s) Palit GeForce RTX 4070 JetStream 12GB | CPU-based Intel Iris XE + RTX 3070 8GB 150W
Storage 4TB SP UD90 NVME, 960GB SATA SSD, 2TB HDD | 1TB Samsung OEM NVME SSD + 4TB Crucial P3 Plus NVME SSD
Display(s) Acer 28" 4K VG280K x2 | 16" 2560x1600 built-in
Case Corsair 600C - Stock Fans on Low | Stock Metal/Plastic
Audio Device(s) Aune T1 mk1 > AKG K553 Pro + JVC HA-RX 700 (Equalizer APO + PeaceUI) | Bluetooth Earbuds (BX29)
Power Supply EVGA 750G2 Modular + APC Back-UPS Pro 1500 | 300W OEM (heavy use) or Lenovo Legion C135W GAN (light)
Mouse Logitech G502 | Logitech M330
Keyboard HyperX Alloy Core RGB | Built in Keyboard (Lenovo laptop KB FTW)
Software Windows 11 Pro x64 | Windows 11 Home x64
You can use a GPO to create a 2-hour lock screen timeout, requiring users to log back in. I've used the screensaver method for compatability.

Here's some tips here and here. Keep in mind these lock the active session, but do not log it off. You can create a GPO to force logoff, but as said above if the user was in the middle of work or hadn't saved...you've screwed em. Not something IT should be doing necessarily unless there's some specific need to be that controlling over user access, but here is a link on how to manage that.

You can prevent users from logging into specific PC's using GPO as well, as instructed here and here. But that doesn't really help you for your specific request. Though might give you some direction.

Using a GPO to restrict times allowed to log in could help with controller user access control as described here.

If you require software to get it done, this was something that came up a couple times in my Google search.

Preventing them from logging back in seems kinda bizarre...you've asked for help resolving some different things for work over the past year-ish...but this might be the most interesting yet. Honestly it raises some red flags to me on a management side as to why you'd need to do this in the first place, but in the same breath if its for students/testing then it makes perfect sense. Hopefully this helps give you a direction.

:toast:
 
Joined
Apr 14, 2012
Messages
115 (0.03/day)
Processor Intel Core i7 5930K
Motherboard ASUS Rampage V Extreme [BIOS 1502]
Cooling Corsair H110i GT
Memory Corsair Dominator Platinum - 32GB (4x8GB) @ 2666Mhz C15
Video Card(s) NVIDIA GeForce GTX 980 Ti
Storage Samsung SM951 M.2 512GB
Display(s) ASUS RoG PG278Q
Case Corsair Obsidian 900D
Audio Device(s) Onboard Sound
Power Supply Corsair AX1500i
Mouse Mad Catz R.A.T. 9
Keyboard Logitech G19 v1
Software Windows 7 Professional x64
Preventing them from logging back in seems kinda bizarre...you've asked for help resolving some different things for work over the past year-ish...but this might be the most interesting yet. Honestly it raises some red flags to me on a management side as to why you'd need to do this in the first place, but in the same breath if its for students/testing then it makes perfect sense. Hopefully this helps give you a direction.
:toast:

My job is to set up the work place according to management needs and rules. This is not something I come up with or a desire I have to make people's life more complex.
I see two reasons to proceed with this. The first, to avoid people staying after their work time browsing the internet using up time on the computer when employees currently clocked-in would need truly need it. Two, to avoid people from staying extra five or ten minutes during their break time.
Yes, logging them out automatically is a little drastic, but that is why a timer should be displayed so there is no reason why it would catch them by surprise.
 
Joined
Aug 17, 2016
Messages
831 (0.30/day)
System Name Gaming Desktop
Processor i7 6700k
Motherboard asus rog alpha
Cooling H110i
Memory Corsair Dominator 16gb DDR4 3200
Video Card(s) GTX 1080
Storage EVO 840 500gb, EVO 850 500gb, Perc 710 Raid WD RED 4tbx4
Case Corsair 500r
Power Supply Antec 850
Mouse Logitec G502
Keyboard a cheap dell
as stated a gpo to restrict login sessions to 2 hours on a specific ou for the employee lounge would solve the 1st half of the problem.

the 2 hour wait time and timer is a little trickier.
for the timer a simple script that checked the timestamp on a login file under the user profile then counted down would work.
for the 2 hour wait time that's where it gets harder. for that i'd probly have a database log when the user accessed the machine ( via login script on the same ou). then if last logout was less than 2 hours force the logout.


there may be some canned software for restricting total computer time per day for kids ( don't have kids so don't know off the top of my head) that should meet the needs.
 
Joined
Jul 16, 2014
Messages
8,117 (2.27/day)
Location
SE Michigan
System Name Dumbass
Processor AMD Ryzen 7800X3D
Motherboard ASUS TUF gaming B650
Cooling Artic Liquid Freezer 2 - 420mm
Memory G.Skill Sniper 32gb DDR5 6000
Video Card(s) GreenTeam 4070 ti super 16gb
Storage Samsung EVO 500gb & 1Tb, 2tb HDD, 500gb WD Black
Display(s) 1x Nixeus NX_EDG27, 2x Dell S2440L (16:9)
Case Phanteks Enthoo Primo w/8 140mm SP Fans
Audio Device(s) onboard (realtek?) - SPKRS:Logitech Z623 200w 2.1
Power Supply Corsair HX1000i
Mouse Steeseries Esports Wireless
Keyboard Corsair K100
Software windows 10 H
Benchmark Scores https://i.imgur.com/aoz3vWY.jpg?2
Have you asked anywhere in the PowerShell community? There are a lot of forums around specifically for Power Shell, but the best place I found to ask such questions was on Reddit r/Powershell.
 
Joined
Jan 17, 2010
Messages
12,280 (2.36/day)
Location
Oregon
System Name Juliette // HTPC
Processor Intel i7 9700K // AMD Ryzen 5 5600G
Motherboard ASUS Prime Z390X-A // ASRock B550 ITX-AC
Cooling Noctua NH-U12 Black // Stock
Memory Corsair DDR4 3600 32gb //G.SKILL Trident Z Royal Series 16GB (2 x 8GB) 3600
Video Card(s) ASUS RTX4070 OC// GTX 1650
Storage Samsung 970 EVO NVMe 1Tb, Intel 665p Series M.2 2280 1TB // Samsung 1Tb SSD
Display(s) ASUS VP348QGL 34" Quad HD 3440 x 1440 // 55" LG 4K SK8000 Series
Case Seasonic SYNCRO Q7// Silverstone Granada GD05
Audio Device(s) Focusrite Scarlett 4i4 // HDMI to Samsung HW-R650 sound bar
Power Supply Seasonic SYNCRO 750 W // CORSAIR Vengeance 650M
Mouse Cooler Master MM710 53G
Keyboard Logitech 920-009300 G512 SE
Software Windows 10 Pro // Windows 10 Pro
As an IT professional its your job to inform your employer how to properly administrate policy. This is not best practice anywhere I know of. It always more concern what there doing on line not how much
 
Joined
Oct 22, 2014
Messages
13,210 (3.80/day)
Location
Sunshine Coast
System Name Black Box
Processor Intel Xeon E3-1260L v5
Motherboard MSI E3 KRAIT Gaming v5
Cooling Tt tower + 120mm Tt fan
Memory G.Skill 16GB 3600 C18
Video Card(s) Asus GTX 970 Mini
Storage Kingston A2000 512Gb NVME
Display(s) AOC 24" Freesync 1m.s. 75Hz
Case Corsair 450D High Air Flow.
Audio Device(s) No need.
Power Supply FSP Aurum 650W
Mouse Yes
Keyboard Of course
Software W10 Pro 64 bit
What type of employee wants to waste a few hours of down time at work in a lounge?
Most places they are lucky to stretch lunch out to an hour, and end of the day they bolt for the door.
 

Kursah

Super Moderator
Staff member
Joined
Oct 15, 2006
Messages
14,673 (2.29/day)
Location
Missoula, MT, USA
System Name Kursah's Gaming Rig 2018 (2022 Upgrade) - Ryzen+ Edition | Gaming Laptop (Lenovo Legion 5i Pro 2022)
Processor R7 5800X @ Stock | i7 12700H @ Stock
Motherboard Asus ROG Strix X370-F Gaming BIOS 6203| Legion 5i Pro NM-E231
Cooling Noctua NH-U14S Push-Pull + NT-H1 | Stock Cooling
Memory TEAMGROUP T-Force Vulcan Z 32GB (2x16) DDR4 4000 @ 3600 18-20-20-42 1.35v | 32GB DDR5 4800 (2x16)
Video Card(s) Palit GeForce RTX 4070 JetStream 12GB | CPU-based Intel Iris XE + RTX 3070 8GB 150W
Storage 4TB SP UD90 NVME, 960GB SATA SSD, 2TB HDD | 1TB Samsung OEM NVME SSD + 4TB Crucial P3 Plus NVME SSD
Display(s) Acer 28" 4K VG280K x2 | 16" 2560x1600 built-in
Case Corsair 600C - Stock Fans on Low | Stock Metal/Plastic
Audio Device(s) Aune T1 mk1 > AKG K553 Pro + JVC HA-RX 700 (Equalizer APO + PeaceUI) | Bluetooth Earbuds (BX29)
Power Supply EVGA 750G2 Modular + APC Back-UPS Pro 1500 | 300W OEM (heavy use) or Lenovo Legion C135W GAN (light)
Mouse Logitech G502 | Logitech M330
Keyboard HyperX Alloy Core RGB | Built in Keyboard (Lenovo laptop KB FTW)
Software Windows 11 Pro x64 | Windows 11 Home x64
My job is to set up the work place according to management needs and rules. This is not something I come up with or a desire I have to make people's life more complex.
I see two reasons to proceed with this. The first, to avoid people staying after their work time browsing the internet using up time on the computer when employees currently clocked-in would need truly need it. Two, to avoid people from staying extra five or ten minutes during their break time.
Yes, logging them out automatically is a little drastic, but that is why a timer should be displayed so there is no reason why it would catch them by surprise.

Seems that overall your management strategy is quite drastic and oppressive IMHO. Maybe you and/or management see an overall picture and need for such measures but outside of a school environment I really don't. Simply browsing the internet isn't usually a load intensive operation...streaming and downloading however are.

Limiting workstation access using time frames makes sense depending on needs...and I hope you're taking a look at the links I posted prior because it makes a few easy GPO configs possible to limit what time users are allowed. Could make short work of this whole task.

If you have streaming or bandwidth issues what are you doing on the network management side to mitigate that?

Are you tracking bandwidth usage and applying QoS to the network to better manage network traffic and WAN load?

Have you considered deploying a proxy server for web caching and content filtering?

That'll help mitigate traffic use and can increase access and restriction policies at an IT network management level while allowing more users to utilize the current WAN connection you have in place.

Have you considered DNS/Web filtering? Even a service like OpenDNS that is affordable and effective? Especially using their enterprise grade umbrella suite. Block sites and categories that don't fit the workplace criteria. If they can't access it at work then they won't see the need to be on it. Then you can allow them the time they need to get their work done.

If folks are sucking up bandwidth due to Facebook, YouTube and Pandora then why not simply block them or at least the biggest offenders?

Many web filters and proxies support LDAP so you can integrate with your AD structure and utilize current security groups and OUs to handle who gets filtered for what. This makes A LOT more sense than forced logoff timers, whether the user has saved their work or not. It also resolves the timed access issue...which if you only want users to have access at regular/consistent times I posted a link on how to set that up via GPO already and I invite you to review it.

Depending on your sites configuration and needs, you might be able to deploy some common sense network resources (if you havent already) so your staff can have that extra 5 minutes of web access to authorized resources and not worry about losing their work after being forced to log off.

This would benefit morale and turnover rates (if that matters) if this is in fact employees and not students. If you're in a school then use e-rate to file for a web cache/proxy approval budget.

There's a lot of ways to attack and solve these issues and the better details you can provide about your needs maybe we can suggest a better way...or maybe the path you're on is still best for your site's specific needs.

Without knowing what you already have in place I must leave my speculation that it would be more effective to properly manage your sites bandwidth, filtering and caching abilities that would affect all users and when properly configured and managed improve everyone's experience.

:toast:

Edit: I should add one of our larger clients does (well had) a lot of user account restriction via GPO which causes headaches for them and us when assisting users. Without going into too much detail they've gone more to.the access control route and its made things a lot nicer for everyone involved.

And while it will limit what they can access on the web at work, that level of oppression is far less negative and critical of and to workers. They want to Facebook, do so on their time, device and service.
 
Last edited:
Joined
Jan 17, 2010
Messages
12,280 (2.36/day)
Location
Oregon
System Name Juliette // HTPC
Processor Intel i7 9700K // AMD Ryzen 5 5600G
Motherboard ASUS Prime Z390X-A // ASRock B550 ITX-AC
Cooling Noctua NH-U12 Black // Stock
Memory Corsair DDR4 3600 32gb //G.SKILL Trident Z Royal Series 16GB (2 x 8GB) 3600
Video Card(s) ASUS RTX4070 OC// GTX 1650
Storage Samsung 970 EVO NVMe 1Tb, Intel 665p Series M.2 2280 1TB // Samsung 1Tb SSD
Display(s) ASUS VP348QGL 34" Quad HD 3440 x 1440 // 55" LG 4K SK8000 Series
Case Seasonic SYNCRO Q7// Silverstone Granada GD05
Audio Device(s) Focusrite Scarlett 4i4 // HDMI to Samsung HW-R650 sound bar
Power Supply Seasonic SYNCRO 750 W // CORSAIR Vengeance 650M
Mouse Cooler Master MM710 53G
Keyboard Logitech 920-009300 G512 SE
Software Windows 10 Pro // Windows 10 Pro
Yea we don't have any social media. We do have youtube but the bandwith is so locked down that it buffers every 30 sec.
 

eidairaman1

The Exiled Airman
Joined
Jul 2, 2007
Messages
40,435 (6.58/day)
Location
Republic of Texas (True Patriot)
System Name PCGOD
Processor AMD FX 8350@ 5.0GHz
Motherboard Asus TUF 990FX Sabertooth R2 2901 Bios
Cooling Scythe Ashura, 2×BitFenix 230mm Spectre Pro LED (Blue,Green), 2x BitFenix 140mm Spectre Pro LED
Memory 16 GB Gskill Ripjaws X 2133 (2400 OC, 10-10-12-20-20, 1T, 1.65V)
Video Card(s) AMD Radeon 290 Sapphire Vapor-X
Storage Samsung 840 Pro 256GB, WD Velociraptor 1TB
Display(s) NEC Multisync LCD 1700V (Display Port Adapter)
Case AeroCool Xpredator Evil Blue Edition
Audio Device(s) Creative Labs Sound Blaster ZxR
Power Supply Seasonic 1250 XM2 Series (XP3)
Mouse Roccat Kone XTD
Keyboard Roccat Ryos MK Pro
Software Windows 7 Pro 64
Task scheduler should be able to help same with gpedit.msc too
 
Top