Educause Security Discussion mailing list archives

Re: Timeout/Lockout Settings


From: "Basgen, Brian" <bbasgen () PIMA EDU>
Date: Wed, 10 Jun 2009 08:40:32 -0700

 We have a 15 minute timeout on all staff machines through GPO. We don't apply this GPO to presentation, classroom, etc 
machines.

 If this is the first time your institution is doing it, just make sure the administration is willing to weather the 
storm for about the first 1-3 months.

~~~~~~~~~~~~~~~~~~
Brian Basgen
Information Security
Pima Community College
Office: 520-206-4873


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tupker, 
Mike
Sent: Wednesday, June 10, 2009 8:19 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Timeout/Lockout Settings

We have a locking policy of 60 minutes however we are changing it to 15 minutes after this summer. There was talk about 
forcing a 15 minute standby with a password requirement but we have been experiencing unreliable results with GPO 
enforced standby in XP. We also force all employee and lab screen savers to a picture slideshow of the campus. Slide 
show screen saver settings are kind of a pain to control though.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Adam 
Richard
Sent: Wednesday, June 10, 2009 9:35 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Timeout/Lockout Settings

I am curious to know how other peer institutions are setting up their
timeout/lockout settings.

How are you enforcing the timeouts (pointsec, windows settings,
screensaver,etc)?

How long must the PC be inactive for the timeout setting to take effect? Do
the time limits vary based on user?

Thanks all!

Adam Richard '05
IT Security Analyst/Operations Specialist

Messiah College
Hoffman 211
(717) 796-1800 x.6570

One College Ave.
Information Technology Services
Box 3055
Grantham, PA 17027

"ITS will never ask you for your password"

Current thread: