Re: [EXTERNAL] [SECURITY] Windows Logout after inactivity

["King, Ronald A." <raking () NSU EDU>]

Good points. Thank you!

Ronald King
Director of OIT Security

With Office 365, you can report a message as phishing or junk. Using Outlook in a web browser or the mobile Outlook 
app, start by clicking/tapping "Junk/Report Junk!"

Office of Information Technology
(757) 823-2916 (Office)
raking () nsu edu<mailto:raking () nsu edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of James Valente
Sent: Friday, December 4, 2020 8:35 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [EXTERNAL] [SECURITY] Windows Logout after inactivity

We're not but if you were to go this route I would strongly recommend providing a server or other terminal for batch 
jobs to get done.  Some of our peoplesoft users in finaid/registrar run batches on their desktops (and having that on 
dedicated server may be better) and being auto-logged out would cause issues. I don't think, in their case, it would 
take 24 hours but legitimate use cases of a user having something running over the weekend, for example, will come up 
and you'll want to accommodate those before moving with an auto log out. It will cut out a lot of pushback as users 
will need to implement behavioral changes (save your excel sheet!) for it to work.


James Valente
Associate Director of Information Security
978.542.2739 // GPG Key ID: 0xBF201E0A813AEDD1
SALEM STATE UNIVERSITY
352 Lafayette Street
Salem, MA 01970
salemstate.edu

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of King, Ronald A.
Sent: Wednesday, December 2, 2020 12:40
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [EXTERNAL] [SECURITY] Windows Logout after inactivity

CAUTION: This email originated from outside of Salem State University. Do not click links or open attachments unless 
you recognize the sender and know the content is safe.
Good afternoon Security Pros! I hope all is well.

I am inquiring today and asking if any institution forces logoff of client workstations after 24 hours of inactivity? 
This is beyond the lock out that is set for 15 or 30 minutes a lot of us already do.

If you do logoff after 24 hours (or some other period) how do you do it in an AD environment?

As always, replies directly are welcome if one prefers.

Thanks!
Ron

Ronald King
Director of OIT Security

With Office 365, you can report a message as phishing or junk. Using Outlook in a web browser or the mobile Outlook 
app, start by clicking/tapping "Junk/Report Junk!"

Office of Information Technology
(757) 823-2916 (Office)
raking () nsu edu<mailto:raking () nsu edu>
www.nsu.edu<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.nsu.edu%2F&data=04%7C01%7Cjvalente%40SALEMSTATE.EDU%7Cb8945911b27741bff4f308d896e960ab%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C1%7C637425276384985963%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2BEGEqXNQTzdxVgc2Ae6Q%2F5ViPT6ZspZq5PL58kHJ8BY%3D&reserved=0>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjvalente%40SALEMSTATE.EDU%7Cb8945911b27741bff4f308d896e960ab%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C1%7C637425276384985963%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=aq%2FSnxYaHMPz3fPYUm%2F55hEf0jvxMlJRuWJDkwmFVM4%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community