Mastering Windows Group Policy

Idle-time lockout policy

Let's start with a policy setting that every company in the world should be putting into place for their users and computers. The purpose of having user accounts in the first place is to make sure that you can limit access to certain things based on who is logged in, and to be able to track which users are accomplishing which tasks. Therefore, it should be part of any company's employee handbook that users always lock their screens when they walk away from their desk. This is especially important with mobile computers, such as laptops. Imagine logging into your machine, connecting your company VPN, and then walking across the coffee shop to grab your drink. Just that quickly, someone sitting at the table behind you ...