C
Curfew
Enterprise

Enforce a maximum interactive Windows session length for compliance — Curfew warns each user as the limit nears, then forces a clean sign-out. Its companion tray app quietly snapshots every open window and restores your desktop at next login, so the policy costs no lost work.

C# · WinForms NIST SP 800-171 · 3.1.11 NIST 800-53 · AC-12 CMMC L2 · AC.L2-3.1.11 ADMX / GPO policy Tamper-resistant No network · no telemetry
✉ Request a demo 🗒 What's new in 1.3 ✉ Contact us Explore the UI ↓
Curfew Enterprise overview video ▶ Watch the 3-minute overview
⏻ Stay compliant

Meet the session-termination mandate

Curfew automatically signs users out after a maximum session length you define — the exact control your auditors look for under NIST SP 800-171 (3.1.11), NIST 800-53 (AC-12), and CMMC Level 2. It warns each person before the deadline, can't be turned off by end users, and logs every action for your audit trail. A clean, supportable replacement for fragile homegrown logoff scripts.

↺ Keep people productive

No lost work, no help-desk tickets

Forced sign-outs usually mean reopening everything by hand. Curfew quietly remembers each person's open windows, apps, and documents, and puts the desktop back exactly as it was at next login. You get the compliance posture without the productivity hit — or the support calls that come with it.

Capabilities

One product, two jobs done right

One per-seat license covers both halves of the solution: automatic, tamper-proof enforcement that satisfies your session-termination control, and seamless session recovery that keeps your people productive. Deployed centrally, managed by policy, and built to pass an audit.

⏱️

Automatic session termination

Signs users out once they hit a maximum session length you set — the real AC-12 / 3.1.11 session-termination control, not just an idle screen lock. Every active session's age is tracked accurately, even across disconnects and reconnects.

Enforcement
🔔

Fair warning before sign-out

Users get a heads-up on a schedule you choose (e.g. 30, 15, 5, 1 minutes out). You control the popup title and message — with a live countdown — and can preview the exact wording with one click before it ever reaches a desktop.

Enforcement
🧪

Risk-free rollout

Ships in a log-only mode that records exactly who would be signed out — straight to the Windows Event Log — without ending anyone's session. Switch to enforcement once you've confirmed the policy behaves on your fleet.

Enforcement
🛡️

Tamper-resistant by design

Runs as a protected system service that standard users can't stop, disable, or reconfigure. Settings are password-protected, and Group Policy always wins — so the policy you set centrally is the policy that sticks.

Enforcement
🗂️

Desktop, restored — hands-free

Curfew snapshots every open window right before sign-out, then can rebuild the workspace on its own seconds after next login — same apps, positions, size, and state. Prefer control? People can still pick any recovery point by hand.

Recovery
📄

Documents reopened, not just windows

Goes beyond window positions: reopens the actual Office documents and files people had open, brings back browser tabs, and reconnects .rdp Remote Desktop sessions — nothing to dig back up by hand.

Recovery
🔒

Private & CUI-safe

Everything stays on the endpoint — encrypted at rest and keyed to the Windows user, with no cloud, network calls, or telemetry. Capturing file paths is optional, and history auto-expires on a retention schedule you set — useful wherever CUI is in scope.

Security
📦

Deploys through your tools

A per-machine service plus a lightweight per-user app, managed entirely by Group Policy or registry — no extra runtimes to package. Hidden from end users' Add/Remove list, with removal locked behind an admin code.

Deployment
🧩

Enforcer optional

Already have an auto-logoff routine? The installer lets you deploy in snapshot-only mode — the tray app and full session recovery without Curfew's session-limit service. The tray then shows a running session-age counter in place of the countdown.

Deployment

Built for the session-termination control

Authenticated interactive sessions shouldn't linger and go stale. Curfew enforces automatic session termination after an organization-defined maximum length — the real, auditable NIST control, distinct from inactivity session lock (NIST 3.1.10 / AC-11). Policy is delivered by GPO/ADMX, MSI, or registry, and a Group Policy under …\Policies\Curfew always overrides local values. Everything is written to the Windows Event Log for your audit trail.

NIST SP 800-171 · 3.1.11Terminate a user session after a defined condition (r3: 03.01.11)
NIST SP 800-53 · AC-12Session Termination
CMMC L2 · AC.L2-3.1.11Level 2 practice

App preview

What your people will see

A native Windows experience that stays out of the way — no browser, no login, nothing new to learn. Everything lives in the system tray: a live countdown to sign-out, one-click snapshots, and full session recovery. When a snapshot is restored, every app, document, and remote-desktop session comes back exactly where it was — so a forced sign-out costs no lost work and no help-desk ticket.

System-tray menu (left- or right-click)

Curfew system-tray menu: a live countdown to sign-out, a Session Policy section with the limit and warning schedule, and a Session Snapshot section for taking and recovering snapshots.

A live countdown shows the time left before sign-out. The Session Policy section (admin password-protected) holds the limit and warning schedule; the Session Snapshot section is where people take and recover their work.

Restore session window

Curfew Restore session window: choose a snapshot, review the list of windows that were open with their process and state, preview a screenshot of the desktop, then restore the selected windows.

Pick a recovery point, review exactly what was open — apps, documents, RDP sessions — glance at the screenshot preview to confirm it's the right one, then bring the whole desktop back in a single click.

Actual screenshots of the Windows app — sample recovery point, window list, and countdown shown for reference.

Release notes

Latest: tray app v1.3.0

The visible face of Curfew Enterprise. Selected highlights from the changelog.

v1.3.0

v1.2.0 added a snapshot-only install option — the tray app and recovery without the session-limit service, for fleets that already have auto-logoff — plus a running session-age counter and auto-launch of the tray app when setup completes. Earlier releases brought screenshot previews, the resizable restore splitter, per-snapshot delete, named manual snapshots, and the tabbed main window. See the full changelog.