I need to find a way to have Windows 2000 automatically log off the user after 15 minutes of idle time. Locking the workstation is not a solution; they must actually be logged off Windows.
The winexit.scr screen saver, a tool available with the Windows 2000 resource kit, allows the configuration of automatic logoff after a designated period of time. You can force the use of a specific screen saver by using Group Policy. To enable the use of this screen saver, you will need to add Set Value and Create Subkey permissions for the users in the registry key HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersion.
Use extreme caution when editing the registry and test this thoroughly. Also, realize that this will close all active programs. If the user has not saved his work, data may be lost.