>How do you handle users who exit the application other than through the prescribed logout? (turning off their machine, power outage, etc.)

When they exit the lock on their record is released even if they don't log out.