Re: Timeout/Lockout Settings

["Porier, Jeremy M." <jporier () CCU EDU>]

We have a 15 minute screen saver through group policy across the board.
Got complaints for about a week or so and then everyone adjusted.  One
problem is faculty who don't logout of a classroom computer and then the
next faculty member comes in to a locked workstation.  A power cycle is
easy but surprisingly not obvious to most people.

We also have a lock-it-when-you-leave-it policy.  If I find a computer
that hasn't been locked by one of my staff it is promptly switched to a
Hello Kitty background and I send an email from their account to the
department announcing that "I" am buying breakfast burritos tomorrow
morning and everyone should email me what kind they want.  That has
drastically cut down on the number of unlocked workstations I find.

Jeremy Porier
Senior Director of IST
Colorado Christian University

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Adam Richard
Sent: Wednesday, June 10, 2009 8:35 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Timeout/Lockout Settings

I am curious to know how other peer institutions are setting up their
timeout/lockout settings.  

How are you enforcing the timeouts (pointsec, windows settings,
screensaver,etc)?

How long must the PC be inactive for the timeout setting to take effect?
Do
the time limits vary based on user?

Thanks all!

Adam Richard '05
IT Security Analyst/Operations Specialist

Messiah College
Hoffman 211
(717) 796-1800 x.6570

One College Ave.
Information Technology Services
Box 3055
Grantham, PA 17027

"ITS will never ask you for your password"