Lockout Settings

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

I'd like to get everyone's feedback on their current enterprise settings for screen lockout.  This discussion has re 
emerged for us as we roll out Sharepoint with Windows Authentication (rather than through an ISA server) which will 
provide portals (without a second login/password requirement) into some applications which maintain sensitive data.  Is 
everyone using a 15 minute screen lockout?  Do you have Sharepoint? Browser timeout?

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 744-7979/Fax: (714) 744-7041


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barros, 
Jacob
Sent: Thursday, June 11, 2009 12:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Timeout/Lockout Settings

15 minutes for us as well.  There are a few exceptions like an OU for
admissions counselors.  Lock it when you leave it is ideal.  

Jacob Barros
Network Administrator
Grace College


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Adam Richard
Sent: Wednesday, June 10, 2009 10:35 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Timeout/Lockout Settings

I am curious to know how other peer institutions are setting up their
timeout/lockout settings.  

How are you enforcing the timeouts (pointsec, windows settings,
screensaver,etc)?

How long must the PC be inactive for the timeout setting to take effect?
Do
the time limits vary based on user?

Thanks all!

Adam Richard '05
IT Security Analyst/Operations Specialist

Messiah College
Hoffman 211
(717) 796-1800 x.6570

One College Ave.
Information Technology Services
Box 3055
Grantham, PA 17027

"ITS will never ask you for your password"