@romano_rosinski Firstly, your options are dependent on the computer
having an internet connection. I would suggest any of the following: Log
out the user: Create a simple policy to run the following command: sudo
launchctl bootout user/$(id -u ) Dur...
This sounds good, I was trying to follow the logic and then realised you
still need an offline policy to check an trigger. I am not a big
supporter of embedding passwords, especially admin credentials.Thanks
for sharing though.