Re: Locking Computer Policy

["King, Ronald A." <raking () NSU EDU>]

Ditto here.

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
raking () nsu edu<mailto:raking () nsu edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Mandi Witkovsky
Sent: Thursday, May 2, 2019 8:13 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Locking Computer Policy

We have a group policy applied to all workstations that the PC locks after 15 minutes of inactivity.  This sometimes 
causes issues in classrooms, but nothing so critical that we have looked into some sort of exception process.  When we 
first implemented it (10+ years ago) it rubbed people the wrong way but more or less everyone is used to it now.

mandi

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Ronald Loneker
Sent: Wednesday, May 1, 2019 6:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Locking Computer Policy

Hi Everyone -

We looking to set up a group policy to push out to some of our end users to automatically lock a computer after a 
certain period of inactivity - especially in departments that have elevated privileges or access to sensitive data.

We are noticing some people not following procedure on this, and we want to take action.

What best practices are you using at your institution in terms of the amount of time before a computer locks 
automatically during inactivity?

Thanks in advance for your thoughts on this.

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229<tel:973-290-4229>

e-mail:  rloneker () cse edu<mailto:rloneker () cse edu>


CSE's IT department will never ask for your password, social security number or other personal information in an e-mail 
message.

Please do not share any information with others!