Detections
Analytics

1.201 WN11-SO-000070

Information

The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.

GROUP ID: V-253444
RULE ID: SV-253444r958636

Unattended systems are susceptible to unauthorized use and must be locked when unattended. The screen saver must be set at a maximum of 15 minutes and be password protected. This protects critical and sensitive data from exposure to unauthorized personnel with physical access to the computer.

Satisfies: SRG-OS-000279-GPOS-00109, SRG-OS-000163-GPOS-00072

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Interactive logon: Machine inactivity limit'

to '900' seconds' or less, excluding '0' which is effectively disabled.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-12, 800-53|SC-10, CCI|CCI-001133, CCI|CCI-002361, Rule-ID|SV-253444r958636_rule, STIG-ID|WN11-SO-000070, Vuln-ID|V-253444

Plugin: Windows

Control ID: c4ea87c8d1ae227a31cb5968f67f009d84670106cd69ca674711d7c979e3da5e