1.1.3.6.10 Set 'Interactive logon: Machine inactivity limit' to '900 or fewer seconds'

Information

Windows notices inactivity of a logon session, and if the amount of inactive time exceeds the inactivity limit,
then the screen saver will run, locking the session.

Solution

Make sure 'Interactive logon: Machine inactivity limit' to '900 or fewer seconds' is set to a maximum of 900 seconds (15 minutes).

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11, CSCv6|16.5

Plugin: Windows

Control ID: 99d63c1a15e9f0aad7a75a06a9fb6e78ed507b8c0f1f824d9b0634e99f61f36f