Locking PCs

[DavR]

Get the server to lock all client PCs automatically when the fire alarm goes off, with the message: there's a fire, go outside!

 

You jest, I have been asked if this is something I could set up for lock down procedure - "We are under attack, stay inside!"

 

Technically yes, but practically...... no.

[enjay]

You jest, I have been asked if this is something I could set up for lock down procedure - "We are under attack, stay inside!"

 

Technically yes, but practically...... no.

 

In the gold old days of flat networks, we used Net Send messages for reminders "year 7, your assembly is in the hall" or whatever. Not sure we'd have done it for "the building is on fire, get out" for obvious safety reasons, but we certainly would have done for "we're under attack, lock your door and hide".

[mavhc]

when signal from fire alarm received:
  Loop every computer in parallel:
     set lock screen jpeg to c:\lockscreen\omgfire.jpg
     rundll32.exe user32.dll,LockWorkStation

[DrCheese]

haha

 

Have started becoming really strict on this here, I've shoved a note on everyone's desktop wallpaper that Data protection is their responbility & to lock the machines (Along with a nice Windows + L Picture).

 

Still finding locked machines, so set the timeout to 5 minutes. Que complant on our service desk "It's stopping me working" Is it? Unless you're copying stuff off the machine it's not stopping you at all, tho granted it was in an office rather than a classroom so I may tweak it slightly.

 

I did have a member of staff say I should lower it to 2 minutes, as Data protection is more important. I nearly fell off my chair!

 

I have a meeting with the head after the hols to start on our GDPR action plan, so I'll raise it then...

[enjay]

Still finding locked machines, so set the timeout to 5 minutes. Que complant on our service desk "It's stopping me working" Is it? Unless you're copying stuff off the machine it's not stopping you at all, tho granted it was in an office rather than a classroom so I may tweak it slightly.

 

Ours is set to 5 minutes in offices and 15 minutes in classrooms as teachers often leave things on-screen for the class to refer to - I know they could use "Freeze", but they don't seem to.

 

I do notice if people are at their desks but not using their computers, they tend to press a key to wake the screen as soon as it goes off anyway - no idea why! Even my technician does it, and he's a massive power-saving ambassador.

[elsiegee40]

This topic has cropped up before

 

A Salutary Tale - EduGeek.net

 

Article regarding computers being left unlocked - historical - EduGeek.net

Edited October 25, 2017 by elsiegee40

[Hunter]

Ours is set to auto lock after 5 Minutes, staff leaving machines unlocked is a pain for us especially when students are using the rooms. We do have 'Staff Quiet' work room where staff leave themselves logged into computers all the time. We have disabled multi users to try and get them to log themselves out, it is an up-hill battle.

[enjay]

We have disabled multi users to try and get them to log themselves out, it is an up-hill battle.

 

In my experience, that just forces people to dump the power on a PC. Better to leave multi-user enabled rather than risk damage to the PC, IMO.

[Rob_D]

We've got ours set to 10min across the site.

We tried milti users, but the PCs started to grind after 3 or 4 accounts were logged on and running a dozen or so programs, so we disabled it and installed Administrative Unlock instead. So far no complaints (at least none that have reached me).

[enjay]

We tried milti users, but the PCs started to grind after 3 or 4 accounts were logged on and running a dozen or so programs, so we disabled it and installed Administrative Unlock instead. So far no complaints (at least none that have reached me).

 

Our PCs restart automatically a few times a week, which helps reduce that and gets the Windows Updates done at a convenient time.

[mavhc]

Set Idle Logoff on those machines.

[TechMonkey]

I must say the fire drill part may be a little bit picky, if a teacher is stood away from their PC, at the board say, teaching, their priority when that alarm sounds is ensuring the pupils and themselves leave the building as quickly and safely as possible, if a PC is unlocked, so be it, there may be sensitive info but also lives at risk. Even if it's a drill, it has to be treated as real life, hence why we are told to leave any objects and get out as safely and quickly as we can.

 

It's tricky, a tough line to decide, but they also have a duty to protect sensitive information. If I wanted to get at a data then one of the things I would consider is setting off the fire alarm and then finding an abandoned computer. You would probably have a good while to do what you need with no one likely to disturb you.

 

It also goes towards the overall view of data security. Does the school value data security to an extent that it is impressed on the staff that computers should be locked at ALL times they are not at the screen? Would the ICO agree that data stolen during a fire evacuation was extenuating circumstances so not fine or publish the school's name?

[mavhc]

Well, 3 people burned to death, but at least no one has the dates of birth of some kids who you could work out their birthday due to them wearing an I am 8 badge to school one day. Or the addresses you could work out by buying the census data

[enjay]

It's tricky, a tough line to decide, but they also have a duty to protect sensitive information. If I wanted to get at a data then one of the things I would consider is setting off the fire alarm and then finding an abandoned computer. You would probably have a good while to do what you need with no one likely to disturb you.

 

This is why the teachers here lock the classroom doors when they leave during the evacuation. Sadly, I've had seen people set fire alarms off then go through bags.

[PotNoodleTech]

Just had the official go ahead to enable auto locking after 15 minutes. I suggested 5, but hey with compromise cometh progress!