Inactivity warning?

[LRSFC_DanJ]

Senior management have asked us to look at implementing policy to lock computers automatically after a period of inactivity, which we can do.

 

However the wrinkle in this is that (for classroom teaching/projector PCs specifically) they also want an inactivity warning to be displayed on the screen a few minutes before the computer will be locked.

[uPDATED]

 

I've googled around and found various software that can do that and then log off the computer after the timeout, but I can't seem to find any that just lock the computer.

 

Can anyone suggest anything?

 

To try and clarify with an example what we want to do, supposing we had a screen lock set for 10 minutes of inactivity, then at 5 minutes say we would want a warning to display on the screen saying "your computer will be locked in 5 minutes" or similar.

Edited January 11, 2018 by LRSFC_DanJ

[Steve21]

Any reason you wouldn't consider just doing something local, like scheduled task that pops up VBS script?

 

Scheduled tasks can be done to run after X mins inactive, So for example 5 mins inactive runs script, 10mins runs screensaver

 

Steve

[LeMarchand]

Last time I looked at this, the most successful (also aesthetically pleasing and hard-to-miss) method was to launch an HTA with the "About to..." announcement - but I could never find a reliable way of guaranteeing that the warning would appear on top of all other windows. It must be possible, because some of the stuff I use at home has an "always on top until dismissed or hidden" window.

 

Edit: That said, if you're only locking as opposed to restarting (as I was) probably not as critical that they see the notice.

Edited January 11, 2018 by LeMarchand

[Michael]

Wouldn't this essentially tell an unauthorised user 'the computer has been left unoccupied for 10 minutes, come and have a go'?

 

The whole purpose of the lock function is to be discreet and without warning. A warning message will accomplish absolutely nothing.

[LRSFC_DanJ]

Wouldn't this essentially tell an unauthorised user 'the computer has been left unoccupied for 10 minutes, come and have a go'?

The whole purpose of the lock function is to be discreet and without warning. A warning message will accomplish absolutely nothing.

I've just received some updated information, apparently the warning message is only for classroom teaching/projector PCs, so that for example if a teacher is playing a video for a class then they get a warning before the computer gets locked due to inactivity.

[LRSFC_DanJ]

Any reason you wouldn't consider just doing something local, like scheduled task that pops up VBS script?

 

Scheduled tasks can be done to run after X mins inactive, So for example 5 mins inactive runs script, 10mins runs screensaver

 

Steve

 

I looked at the scheduled task inactivity trigger. However it seems it is not user inactivity but PC inactivity? So if there is some program still running then the PC is not considered "idle".

[LeMarchand]

I've just received some updated information, apparently the warning message is only for classroom teaching/projector PCs, so that for example if a teacher is playing a video for a class then they get a warning before the computer gets locked due to inactivity.

 

I may well be wrong, but I thought that playing a video counts as activity (might depend on what you are using for playback!). My HTPC doesn't go to screensaver even during a very long film.

 

Edit: Partially ninja'd.

 

I looked at the scheduled task inactivity trigger. However it seems it is not user inactivity but PC inactivity? So if there is some program still running then the PC is not considered "idle".

 

I think it depends on the program. Just having a Word document open shouldn't count as "activity". Definitely doesn't in terms of activating a screensaver.

Edited January 11, 2018 by LeMarchand

[LRSFC_DanJ]

I may well be wrong, but I thought that playing a video counts as activity (might depend on what you are using for playback!). My HTPC doesn't go to screensaver even during a very long film.

 

I just used that as an example, they could be displaying a powerpoint or anything else that involves a class of students needing to be able to look at the screen without any need for the teacher to be moving the mouse or keyboard for many minutes.

[Steve21]

Anything that full-screens generally flicks on the "presenter" flag and won't activate any idle state. (Whether screensaver or scheduled tasks).

 

The idle task also looks at computer "processes" but it's only if they're doing a high percentile in terms of work e.g. a video render/game would flag, a notepad open wouldn't.

 

So did you want it to flag with videos etc open too? As personally think you'd get mobbed by staff But you can still do that just needs tweaking in the process

 

Steve

[LeMarchand]

I just used that as an example, they could be displaying a powerpoint or anything else that involves a class of students needing to be able to look at the screen without any need for the teacher to be moving the mouse or keyboard for many minutes.

 

PP running a slideshow counts as active IIRC, but not leaving a static slide up on the screen for the students to view. So you could need a warning - though I'd argue that a noticeable enough warning might be distracting to the lesson. Far better that the staff learn to use the "freeze" button on the projector remote.

[Michael]

I think educating users to lock devices when they're definitely leaving the room, rather than inactivity in the middle of a lesson is the way to go. You simply cannot code this kind of behaviour.

 

For this very reason, class teachers are set to 60 mins of inactivity and administrative users set to 5 mins. Staff have been told to lock their machine when leaving a room. Banks or big businesses typically use a smart card, so when leaving the machine, the card is ejected and the computer locked. This kind of scenario simply doesn't work in Education addressing a group of people.