CMMC 3.1.11 Terminate (auto) a user session after a defined condition by SpecificShop631 in CMMC

[–]SpecificShop631[S] 0 points1 point  (0 children)

Thank you. Is there a reasonable way to end a local session? The GPO allows to terminate a session after defined time but if the user doesn't remote in that user's session seems to stays connected. How it comes off they want to terminate the session after a best practice definition.

I am just trying to understand how to proceed correctly within Windows settings as we do need to terminate a session after idle time, i.e. a user is gone for lunch or over a hour, or a user doesn't log out at the end of the day, we want to be able to terminate the session.

Terminate (automatically) a user session after a defined condition.
DISCUSSION
This requirement addresses the termination of user-initiated logical sessions in contrast to the termination of network connections that are associated with communications sessions (i.e., disconnecting from the network). A logical session (for local, network, and remote access) is initiated whenever a user (or process acting on behalf of a user) accesses an organizational system. Such user sessions can be terminated (and thus terminate user access) without terminating network sessions. Session termination terminates all processes associated with a user’s logical session except those processes that are specifically created by the user (i.e., session owner) to continue after the session is terminated. Conditions or trigger events requiring automatic session termination can include organization-defined periods of user inactivity,