{"id":13413,"date":"2018-03-08T15:00:13","date_gmt":"2018-03-08T22:00:13","guid":{"rendered":"https:\/\/www.jumpcloud.com\/?p=13413"},"modified":"2024-11-14T17:43:54","modified_gmt":"2024-11-14T22:43:54","slug":"setting-screen-saver-lock-across-your-windows-fleet","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/setting-screen-saver-lock-across-your-windows-fleet","title":{"rendered":"Setting Screen Saver Lock Across Your Windows Fleet"},"content":{"rendered":"\n

One of the easiest ways to compromise a network is for somebody to gain access to a machine that\u2019s been left unattended. Not convinced this is a likely scenario? Have you ever witnessed somebody momentarily leaving their laptop to go pick up their drink order at the coffee shop? Or maybe you once saw somebody on a flight leave their machine unattended for a few minutes while they hit the lavatory? These are just the right moments where somebody close by can quickly install a keylogger with a USB stick. It can happen, <\/span>it has happened<\/span><\/a>, and is why setting screen saver lock across your Windows fleet is a great system policy.<\/span><\/p>\n\n\n\n

If you are using the right tools, enforcing policies like screen saver lock doesn\u2019t have to be complicated, and we\u2019re not just saying that. To prove it,  we\u2019ll walk you through how easy it is to configure JumpCloud\u2019s screen saver lock policy in this blog post. But first, let’s take a look at why you should consider enforcing a screen saver lock policy.<\/span><\/p>\n\n\n\n

Why Setting Screen Saver Lock Matters<\/span><\/h2>\n\n\n\n

A machine that\u2019s left alone and isn\u2019t locked is perhaps the easiest target there is for attackers. Think about all of the digital assets typically left open on a computer. An email account is probably open, maybe a few web-based applications are in use, and perhaps even a financial account is available. With email alone, a person with malicious intent can reset passwords to any accounts tied to that email. Leaving <\/span>systems<\/span><\/a> alone without the screen locked is a recipe for disaster to say the least.<\/span><\/p>\n\n\n

\n
\"Setting<\/figure><\/div>\n\n\n

A simple solution, of course, is to encourage your team to lock their machine whenever it is left unattended, whether that is in the office, at home, or out in the world. Most of your users will have the best of intentions to do that and likely will. However, what happens when they forget accidentally? Is their machine wide open? It doesn\u2019t need to be when you implement <\/span>JumpCloud<\/span>\u00ae<\/span> Directory-as-a-Service<\/span><\/a>\u00ae<\/span> . <\/span><\/p>\n\n\n\n

Setting Screen Saver Lock Across Windows Systems with JumpCloud<\/span><\/h2>\n\n\n\n

Using our <\/span>cloud-based directory service<\/span><\/a>, it is quite easy setting screen saver lock across your Windows fleet (and <\/span>Mac\u00ae systems as well<\/span><\/a>). You can easily set and enforce the screen saver lock to appear after a period of inactivity. We\u2019d suggest popping the screen saver lock up quite quickly to ensure that there isn\u2019t an opportunity for a malicious person to compromise the machine. Completing this doesn\u2019t require any scripting and can be done in a couple of clicks. Let\u2019s take a look a what you have to do.<\/span><\/p>\n\n\n

\n
\"Setting<\/figure><\/div>\n\n\n

How to Set a Screen Saver Lock Policy for Windows in JumpCloud<\/span><\/h2>\n\n\n
\n
\"Step<\/figure><\/div>\n\n\n

Setting screen saver lock across your Windows fleet starts by logging into the JumpCloud Admin console.<\/span><\/p>\n\n\n

\n
\"Step<\/figure><\/div>\n\n\n

Once you\u2019re there, select the Policies Tab, and then click the bright green button with the white plus icon. This will give you the option to <\/span>set policies for Mac, Linux and Windows systems<\/span><\/a>, but since we\u2019re talking about Windows systems, select \u201cAdd Windows Policy\u201d.<\/span><\/p>\n\n\n\n

This will open up a section that gives you a list of available policies you can configure for your Windows fleet. Select the \u201cconfigure\u201d button that\u2019s associated with Lock Screen.<\/span><\/p>\n\n\n

\n
\"Step<\/figure><\/div>\n\n\n

In this area, you will be able to name the policy, set the time when a system screen locks and select which Windows systems you would like to apply this policy. Once all of this is completed, you can select \u201csave policy\u201d.  <\/span><\/p>\n\n\n\n

As you can see, it literally takes a few clicks to enforce screen saver lock across your Windows fleet, and it is one of the easiest steps that you can take to effectively <\/span>step up your security posture<\/span><\/a>. If you want to make sure users can\u2019t change the screen saver lock setting by disabling their access to the control panel, we have a policy for that too. It allows you to disable a user\u2019s ability to make Windows control panel changes, but that\u2019s a topic for another blog post. Find our list of available policies <\/span>here<\/span><\/a>. <\/span><\/p>\n\n\n\n

There\u2019s More to JumpCloud than System Management<\/span><\/h2>\n\n\n\n

If this is your first time hearing about JumpCloud, you should know that JumpCloud Directory-as-a-Service doesn\u2019t just stop with system management. Our comprehensive <\/span>cloud-based directory service<\/span><\/a> takes an independent approach by integrating with IT resources regardless of their platform, location, protocol, and provider. This means you can secure user authentication to the following:<\/span><\/p>\n\n\n

\n
\"directory-as-a-service\"<\/figure><\/div>\n\n\n