I created a Group Policy that pushes down this auto-logoff screensaver (http://www.squiggle.org/2010/05/autologoffscreensaver/) and sets it as active. It will pop up when the screensaver kicks on and when it reaches its countdown it will log off the session. You can control everything in the registry for it so it can all be within a single GPO.
↧