IT can setup a script to signoff all the sessions at certain time of the day or by Windows setting after they have been idle for certain amount of minutes. I don't recommend the latter because the users might be in a morning meeting for 4 hours and system will log them off.