You can. In Windows you have to go to network connections and change the setting for idle timeout. The only way to "enforce" this is probably if the client is in an Active Directory environment or such where you can control the privileges/policies.
Control Panel\Network and Internet\Network Connections > select the VPN connection > check Properties > Options tab > "Idle time before hanging up"
