Discussion Locked

To Log off or Lock?

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am having difficulty giving a definitive answer to the question "why do I have to log off the network instead of locking my computer" (Windows 2000 Pro). This user has remote access through Gotomypc.com and wants to purchase a Blackberry device. Our epolicy requires logging off if a user will be away from their desk for more than 20 minutes. It was written in Windows 98 era. Any information on this would be appreciated.

4 replies

by vinnyd

Logging off will close all open applications and datafiles.

Locking the computer leaves the applications open and the files open.

Open files will not be backed up unless your network has an Open Files agent to backup the open files.

Hope this helps

by w2ktechman

for short term I would suggest just locking the system (20 min or less). But if it will be for a long time it is better to log off.
If a user is logged off, they are not connected to network resources (most likely), which can help speed things up a little for other users. Also, if logged off it is less likely to unknowingly spread a virus through email and active network connections. There are other reasons as well, but I think this should justify your company's policy, especially in this day and age

by cptomlly

There are also some arguments for locking rather than logging off.

1. Increased productivity by not having to wait for all connections to be re-established, logon scripts to run, reopen all your applications, etc. On some slow workstations, logon time is 1-2 min vs. 5 sec for password entry for unlock.

2. Physical security for the workstation is stronger, because only the user or an admin can unlock the machine.

3. You can set the PC to lock automatically whenever the screensaver activates, which means less "forgotten" logoffs.

You should also consider that most viral threats will be just as well protected with the PC locked as with it logged off. Unless you are completely powering off, you still have the services running, locked or logged off.

We have used the "lock" policy on our Win2K network with 500+ for 2+ years without adverse effects due to the policy. However, we do not back up any data located on users workstations, only network drives data. You could definitely have problems as VinnyD pointed out.

In conclusion, I would say that the benefits of the lock policy outweigh they negatives.

by armour

I have made and worked with various network policies and feel same as CptOmlly there is no reason through the course of the work day for a user (useing NT,2000,XP based machines) to log off. Now there is very good reason for users to log off at end of day as VinnyB has mentioned and at time implementing a forced log off of all systems is needed I pick early morning such a 3 am when users are not likely to be there, as if users do not log off a system will not receive changes log on scripts, software pushes , software updates pushes , Licence changes to server based software accessed.

This discussion is closed to new replies.