Educause Security Discussion
mailing list archives
Re: Automatic timeout to locking screensaver
From: Louis APONTE <LouisAponte () WEBER EDU>
Date: Thu, 4 Oct 2012 10:59:52 -0600
Weber State University
1. Yes, All users must have an auto-locking feature enabled, which
requires a password to unlock.
We do not use the term screen saver, so that power
options can satisfy the requirement.
2. We require this on all faculty and staff workstations; exceptions
are computer labs, public library systems, e-kiosk etc .
3. We recommend activation after 10 min. of idle time, but the standard
is 20 minutes or less.
We also recommend that you physically lock your office door (if you
have a door) should you leave your work area unattended, or manually
lock your system as you leave your work area.
On 10/4/2012 at 10:05 AM, in message
<CA+d9XAPU22J7=umXcAcJKcXcg1uUNY34tevdjb=Kq2xKBZ1G3g () mail gmail com>,
David Curry <david.curry () NEWSCHOOL EDU> wrote:
I'm trying to make the case for implementing a mandatory locking
screensaver on our office workstations/laptops (faculty and
administrative staff). It would be done in the usual way: after some
period (15, 20, 30 minutes TBD) of idle time, the system would invoke
the screen saver, and to restore the screen and continue working, the
user would have to enter his or her password. Reaction has been mixed
(as I expected), and the usual question has come up: "well, what do
other universities do?"
Do you implement a mandatory locking screen saver on your staff and/or
If so, do you do so for all staff/faculty, or just certain groups (and
what are those groups)?
If so, how long is your timeout before the screensaver starts?
DAVID A. CURRY, CISSP * DIRECTOR OF INFORMATION SECURITY
THE NEW SCHOOL * 55 W. 13TH STREET * NEW YORK, NY 10011
+1 212 229-5300 x4728 * david.curry () newschool edu