Edit server_settings.xml or run sd_serversettingseditor.bat and change the value of SESSIONTIMEOUT to 30.
Using this setting and supposing that the "Automatic Refresh Interval" is not set to a lower value, all idle clients will be disconnected after 30 minutes. Note that is different from "logging off" since it won't ask for a password.
generallythat the idea. If the session s not removed from the Admin console then it can be marked for removal and the session should expire after a period of time.
If after that the session is still showing and marked for removal hasnt cleared it you could run a scrip to clear the marked fro removal session. These scripts can be found in the forum by doing a search.
Be aware that people might be using the Tools Options Auto Refresh on the client - this can typically hold onto a concurrent license. At least I think this is right - best if users don't use Autorefresh then even with the client open it will observe your timeout.
I nice thing to add to peoples toolbar is the refresh button as well.
when marking clients for removal/timeout what happens is the lic is released, client remains in a 'dormant state' if no one else requests that lic while dormant you'll reconnect like nothing happened on the client end... if your clients refresh is set to less than the timeout it will never time out because it refreshes before the lic is released. set refresh higher than timeout.
other option is the script/bat file etc... but to answer your first question, no, you can't just kick people off without marking for removal and restarting the app service...