lithnet / idle-logoff Goto Github PK

Idle-Logoff works fine as long as session doesn't go to lock screen first. Is there anyway to get this to work at lock screen?

Hi!
Is it possible to configure the settings from the command line or with a file? I can start Lithnet IdleLogoff in background mode with the /start parameter, but how to configure the idle timeout value for example (without GPO)?
Thank you!

Hello, I installed and configured lithnet idlelogoff on a windows 10 system but it is not working. The user accounts don't logoff after a certain amount of time, I configured the .exe to logoff after 1 minute of system being idle but nothing is happening.

i would like to add this to my domain server so i would be able to mange it at my domain, what's is the steps to to have the policy installed in the domain server ?

I have Windows server 2022 21h2 and my workstations are Windows 10 21h2

I installed this template only on my server and created a GPO for the specific OU where I wanted to test your application.
This GPO to kill idle connections is not working in my scenario. I tested both for users and for machines and it didn't work. Any tips?

Note - This one works -> Lithnet Password Protection for Active Directory

The app does not show up as active when users login via Remote App on the server. Only Remote Desktop users get the active app running.

Is there a command switch to get rid of the settings box that pops up after logon?

This tool seems like the perfect thing for logging out users on a kiosk after idle. however, as the kiosk would have Force Auto Logon, it means the account will be logged in without a user necessarily being there. So have it logoff on 30 minutes of idle will mean it continually logs off every 30 minutes.

It'd be great to have an option that the program will wait for some activity first and then start waiting for idle from that point. Thus only logging off the kiosk user if they've actually used the kiosk.

Is there any chance of getting such an option?

Hi
I'm running W2019 servers in a Domain and have installed the *.msi file on the DC that is the base line for GPO, but I do not see the ADMX file being installed, nor can I subsequent locate it. The Wiki suggests it is auto installed at the same time as the *.msi.

Is the ADMX available separately?

Thanks

I've got an issue with the GPO settings.

When I set the GPO using Computer configuration -> Administrative templates -> Lithnet it works without a problem for all users. When I set the GPO using User configuration -> Administrative templates -> Lithnet to be able to specify certain users the policy is applied but the logoff doesn't work.

Thank you for the work you've down on this program so far. On paper it looks like the answer to a problem I have. However I have not been able to get it to work. In my situation I need to have a warning message displayed before logging off idle users. However, when the warning message is supposed to fire I get the following .NET unhandled exception:

Here are the details:

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.FormatException: Index (zero based) must be greater than or equal to zero and less than the size of the argument list.
at System.Text.StringBuilder.AppendFormatHelper(IFormatProvider provider, String format, ParamsArray args)
at System.String.FormatHelper(IFormatProvider provider, String format, ParamsArray args)
at System.String.Format(String format, Object arg0)
at lithnet.idlelogoff.LogoffWarning.UpdateLabelText()
at lithnet.idlelogoff.LogoffWarning.set_LogoffDateTime(DateTime value)
at Lithnet.idlelogoff.Program.ShowWarning()
at Lithnet.idlelogoff.Program.EventTimer_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

************** Loaded Assemblies **************
mscorlib
Assembly Version: 4.0.0.0
Win32 Version: 4.8.4180.0 built by: NET48REL1LAST_B
CodeBase: file:///C:/Windows/Microsoft.NET/Framework64/v4.0.30319/mscorlib.dll

lithnet.idlelogoff
Assembly Version: 1.1.7478.24869
Win32 Version: 1.1.7478.24869
CodeBase: file:///C:/Program%20Files%20(x86)/Lithnet/IdleLogoff/Lithnet.IdleLogoff.exe

System.Windows.Forms
Assembly Version: 4.0.0.0
Win32 Version: 4.8.4150.0 built by: NET48REL1LAST_C
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Windows.Forms/v4.0_4.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

System
Assembly Version: 4.0.0.0
Win32 Version: 4.8.4001.0 built by: NET48REL1LAST_C
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System/v4.0_4.0.0.0__b77a5c561934e089/System.dll

System.Drawing
Assembly Version: 4.0.0.0
Win32 Version: 4.8.3752.0 built by: NET48REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Drawing/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

System.Configuration
Assembly Version: 4.0.0.0
Win32 Version: 4.8.4190.0 built by: NET48REL1LAST_B
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Configuration/v4.0_4.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

System.Core
Assembly Version: 4.0.0.0
Win32 Version: 4.8.4180.0 built by: NET48REL1LAST_B
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Core/v4.0_4.0.0.0__b77a5c561934e089/System.Core.dll

System.Xml
Assembly Version: 4.0.0.0
Win32 Version: 4.8.3752.0 built by: NET48REL1
CodeBase: file:///C:/Windows/Microsoft.Net/assembly/GAC_MSIL/System.Xml/v4.0_4.0.0.0__b77a5c561934e089/System.Xml.dll

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

If I hit 'Continue' a second and identical unhandled exception box appears. A third one does not appear if I hit 'Continue' again, it just goes away. If I do not touch the unhandled exception window and continue to leave the session idle it will logoff when it is supposed to. It seems the program is still doing what it's supposed do in the background and the unhandled exception only pertains to displaying the warning message.

I could be totally off, but from what I've observed while testing, if the number entered in the "Log off after (minutes)" field is less than the number entered in the "Duration of warning message (seconds)" field, it will result in an unhandled exception when the warning message attempts to fire. Here is a picture for clarity:

These are some of the values I tested with. A small 'log off after' value so I don't have to wait around too long. In this case I believe after one minute idle the warning should fire and after another minute idle the session should log off. But after one minute idle I get the unhandled exception and after another idle minute it logs off. This would also make the values that I intend to use in production unworkable, which are log off after 30 minutes idle with a 300 second (5 minute) warning.

Further, If I set the values so that the number in the 'log off after' field is greater than the number in the 'duration of warning' field (for example log off after 5 minutes with a 4 second long warning message) then I do not get an unhandled exception. However, I do not get a warning message either. I just get logged off without a warning message ever appearing.

I hope this is helpful and I do hope this gets ironed out so that I can use your program.

Maybe I'm missing something, but I've been unable to get the ADMX templates to work. My install process was:

1. Install the .msi on one of our Server 2016 DCs.
2. Copy the admx file to the central store.
3. Create a new GPO, and edit it.
4. I get errors for missing files in both the lithnet.admx and lithnet.idlelogoff.admx files, and no configuration options for IdleLogoff
   are visible.

I have verified the MSI is indeed installed (The executable is installed and can be run from C:\Program Files (x86)\Lithnet) and tried rebooting the DC. I still get these errors.

Trying to force workspace to shutdown after 60 mins of inactivity. AWS Workspace are actually windows server 2016 with a win 10 front end. Installed manually to test and set group policy for setting error in event viewer is there were still active sessions and could not shut down. logged off instead. I was the only active session. Any ideas ?

[enhancement] Add option and SMTP parameters to send a mail notification when operation is performed

I'm seeing on a few computers where the desktop icon layout gets lost when the idle logoff happens.
unsure how to test this since we don't see it on normal logout or reboot.

@ryannewington if we decided to enable the screen saver to display after 5min of inactivity and have the idle-logoff slated to log off after 30minutes will it log off or will it not see the computer Idle because of the screen saver?

Hello,

When i installed the installer on a local workstation, it's ok !

Now, i'm trying to install it on some workstations by GPO but it doesn't work.

The GPO is configured. On the machine, i see the registry key :

Ordinateur\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Lithnet\IdleLogoff

It doesn't work... have you an idea ?

Thank's a lot.

Diego

Hello I was wondering if its possible to pre-configure the minutes to like 30 min and enable it? I am using Altiris to deploy it our pc's. I tried the group policy config but it doesn't do anything.

I have a Windows 7 machine w/ .NET 4.7 I am testing this on. When the idle timeout comes, a .net error occurs:

************** Exception Text **************
System.NullReferenceException: Object reference not set to an instance of an object.
at Lithnet.idlelogoff.Settings.get_Debug()
at Lithnet.idlelogoff.Program.EventTimer_Tick(Object sender, EventArgs e)
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

Any insight would be greatly appreciated - thanks!

Please cancel this request.

Is there any way to add the option of a pop-up notice with a countdown of the remaining time? That would at least give a daydreaming user the option of knowing they need to interact with the screen rather than an unceremonious logoff. Since the application will be watching for user interaction, it wouldn't even need a button; just a touch of the mouse should close the notice and restart the (hidden) countdown.

There would need to be two additional settings: a "notice time" and a "message". Thus a logoff time of 30 minutes could have a 60 second notice with the message "You are about to be logged off. Press a key or move the mouse to remain logged in." Making the notice "blink" (i.e. white to black to white) every 10 seconds and/or a short beep/blip would help catch a user's attention.

I would like to install the MSI via GPO, is there a way to do this with out user interaction? is there switches i can use to have it install automatically.

It does not work if you do not log in
When the device starts and stays in Ctrl + Alt + Sub, the process is not started.
Is there any way to start it without logging in the user?
Tested on Windows 7 x64

Would it be possible to add the disconnect option?
When the user has reached an idle time limit, disconnect the user. This will allow them to reconnect to their session.

Thanks!

Dear Support,

I have created two GPO, one for installing idle logoff and other to define setting (time) for idle logoff, however I observed software is not getting installed, so the next GPO for checking time will not work.

manually when I tried to install software msi, I got a pop up to enter admin credentials, once entered, it installed and then after idle time defined in GPO PC was logged off.

I checked my UAC settings are at stage two from top. So is it getting failed due to UAC ? OR what needs to be checked? Please note our users in environment or not admin's on their PC's

Regards,

Hello,

I've installed the msi on a domain controller, but upon viewing the GPO editor I do not see Lithnet under Computer Configuration > Administrative Templates. I do see policies under %SystemRoot%\PolicyDefinitions\

Any input as to what might be going wrong? Thanks for any help.

Does this only affect users who are logged in at the terminal/console, or does it also affect RDS/Remote PC users?

Hello,
Today we had one user (user 2) who was actively using a computer "X" when suddenly it was rebooted by lithnet application because (user 1) reached the idle time.

( user 1 ) : Left the office with the computer "X" locked.
( user 2 ) : Arrived to the office and logged on computer "X"

Issue: Lithnet application is considering idle time for a disconnected session ( State Disc ), would be possible to avoid reboot because of idle time reached on disc session?

thanks
[email protected]

IdleLogOff is asking each user to install and then wants admin credentials. I have not been able to adjust the credential requirements or change the arguments to silent. How should I handle this?

Thanks

Ok im extremely confused on the instructions. You say to push this with policy you have you simply enable the setting in GPO. Though it doesn't appear in the GPO editor. Which i thought you then meant to install the MSI on the Domain Controller, but that also didnt make the Template appear in GPO. What am i doing wrong?

Thanks.

Standard users have discovered they can open the Task Manager and stop the Lithnet process rendering the app useless when they share this secret with others. We cant limit access to the Task Manger as users need it to kill unresponsive programs. This is on Win 10.

Hello,

I installed Idle Logoff via PDQ Deploy on a test machine.
I enabled the Group Policy setting on both Computer and User Administrative templates.
I logged off and on again.

I see no service/agent running that can handle the auto logoff action.

Can you please help? Am I missing something?

I posted wrong
I'm sorry

Hello, as noted in your blog I have set another GPO ( User Configuration/Windows Settings/Scripts/Logoff... running a shutdown -r -t 0 ) in order to reboot the PC each time there is a logoff ( which is working ok ).. but when lithnet application triggers a logoff this I'm talking about, it does nothing. I tried both commands ( shutdown -l ) and ( shutdown -l -f ) but both commands allow this GPO to be triggered ( So no difference found when using -f parameter). If you have any other tests or recommendations I can perform would be great. Or I don't if you could add an optional feature in order to logoff (-force) the user + Shutdown the computer ( only if this feature is selected )

Thanks !
Alberto Rivas

Good day,

I've set idle logoff to restart our Amazon Workspaces after 175 min if inactivity using GPO and when closing out the client and checking next day I am still logged on, even with "always on" Workspace. Is there anything I can be checking?

We are trialing this software on our systems, and after installing successfully (and configuring locally or via GPO) and rebooting, we are not seeing the process start.

How does the process get initiated when a user logs in? I suspect a security setting on our systems is preventing the process from starting, but not sure where to start looking to troubleshoot.

I have tried to install the MSI package via a GPO, but it fails ever time I try.

Do you know if it is possible to do this? Something additional that I need to do?

Thanks.

Bryan Hunt

Looking to deploy this using Intune for devices joined to AAD and managed by Intune, has anyone had success in deploying the GPO settings using Intune, is this supported and does it work?

hi @ryannewington ,
does the program itself need to be run for it to logout inactive users? or does it change a windows policy which takes care of this?

i'm trying to use the inactivity logout for specific users, maybe if i run the program only for these users it can work. if it's a windows policy it's probably machine-wide.

how would you handle such a scenario?

Feature Request:

Log the user off when their Active Directory Logon Hours expire.

Thanks,

Can you document the CLI switches in your Wiki?

no switch - Requires Admin Rights, provides GUI options for settings
/start - make the app run silently based on pre-existing settings or GPO policies.
/help would be useful

Dear Sir,

I have copied admx and adml to a central store in my windows 2012 R2 server. I need to know the application itself need to be installed on every PC where we want to have idle log off? OR by just copying admx and adml to central store will help us to impose the idle log off for users in our environment?

If software needs to be installed, it has to be done by GPO offcourse, So what is the most appropriate way at user login ? OR at PC reboot, please guide

Apprecaite all your help in this regard

Getting the following issue when trying to import the templates into AD. Environment is Server 2012R2 and Server 2016.

Encountered an error while parsing.
DTD is prohibited.

File

\servername\sysvol\servername\policies\policydefinitions\lithnet.admx, line 7, column 9

I created the GPO for my login but it will not log the computer off. If i configure the tool local and set it to log off it works. Can you tell me why it is not working via GPO?

I am testing idle-logoff for use in a computer lab, and it works well to have the user logged off after a set amount of time.

If I set the action to reboot or shutdown, however, the system still logs off. I've verified the registry value for "Action" is changing from 0 to 1 or 2, and I've restarted the machine after changing the setting. I've also tried it on both a VM and a physical PC, and I get the same behavior.

The version installed is 1.1.6999.20776.

Hi. I'm trying to resolve an issue in which a locked machine (that hasn't been idle long enough to log the user out) is logged into by another user and that repeats until the machine stops responding (usually about user 3 or 4).

Does Lithnet Idle Logoff only take action when the system is idle, or does it work at the user level? IOW, will it log off User1 (in the background) when they have been idle while User2 is still active?

Thanks!

From: Mike Guyette

Is there a way to potentially modify this to add additional options to allow for a message to pop indicating that they will be logged off? I know this goes against what the initial use was when written, but in my company we have conference rooms, demo rooms, and phone booths all over. The issue is many logon and dont logoff when done. This fixes that issue. However, for people in webex calls that are not giving any mouse or keyboard imput within 30 minutes are having issues with the computer suddenly logging out. There is no warning. For these one off instances I would like to find another way to warn users, but without paid solutions we have come up blank. Thanks!!

First of all, thanks for publishing this tool.

Question -- I tried using this on a couple of laptops, and have run into an issue. If the user puts the computer to sleep for the night, when the user logs back into the computer in the morning their session will immediately get logged out. I understand why this is happening -- but I'm curious if you have any ideas on how to work around it. Thanks.

Is there a way to either have a deny or allow list for which users should be auto logged off? Meaning, we might want to auto log off particular non-admin users, but leave 1 admin account logged in. Thanks!