OK i was sitting back for a while but now you mention it i do. Depending on
the lab or geographical PC locations and use a bit.

I utilise WSUS for installing the updates overnight and force a reboot early
mornings before users get in. They know all this so they understand the
process. We force all workstations and laptops to screensaver and lock after
10 minutes, drives them nuts but we have had times when it wasnt in force
and they got burnt.

Seems to work OK for us now

Greg
----- Original Message -----
From: "Thor (Hammer of God)" <thor (at) hammerofgod (dot) com [email concealed]>
To: "Focus-MS" <focus-ms (at) securityfocus (dot) com [email concealed]>
Sent: Friday, August 18, 2006 1:55 AM
Subject: Re: Workstation Shutdown / Logoff Policy :VSMail mx1

> So, from the looks of most of the replies, folks are counting on GPO/WSUS
> to
> enforce screenlock/updating, but rely on the end-user to restart their
> systems.
>
> Anyone actually forcing reboots?
>
> t
>
>
> On 8/16/06 12:18 PM, "Jamie Fullerton" <Jamie.Fullerton (at) ndbt (dot) com [email concealed]> spoketh
> to
> all:
>
>> Our current policy is that all stand-alone workstations have their
>> screensaver set to a 10 minute screensaver with the password required to
>> log back into the system. We encourage people to power off their
>> machines at night but we don't become the Power Gestapo in enforcing
>> this.
>>
>> Our WSUS is configured to redeploy an update if the client is powered
>> down during the initial push of an update (normally an early morning
>> hour with little other traffic on the network).
>>
>> On our Citrix clients all clients have their session terminated after
>> three hours of inactivity. This ensures that all clients are logged out
>> at the end of the business day. If for whatever reason they are not
>> fully logged off the servers, the Citrix servers themselves are rebooted
>> once a day as well.
>>
>> ------------------------------------------------------------------------
---
>> ------------------------------------------------------------------------
---
>>
>>
>>
>
>
>
> ------------------------------------------------------------------------
---
> ------------------------------------------------------------------------
---
>
>

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]