How to configure screen lockout time with Microsoft Intune (settings catalog)

How to Configure Screen Lockout Time with Microsoft Intune Using Setting Catalogs

Microsoft Intune allows you to configure a variety of device security settings, including screen lockout time, using Setting Catalogs. The lockout time is an essential security measure, ensuring that devices automatically lock after a specified period of inactivity.

Here’s a step-by-step guide to configure the screen lockout time on managed devices with Intune using the Setting Catalogs.

Step 1: Create a Configuration Profile in Intune

1. Log in to the Microsoft Intune Admin Center at https://endpoint.microsoft.com.
2. Navigate to Devices → Configuration Profiles.
3. Click + Create Profile.
4. Choose Windows 10 and later (or the appropriate platform) as the platform.
5. Under Profile type, select Settings Catalog.
6. Click Create.

Step 2: Configure the Lock Screen Settings (Including Lockout Time)

1. In the Profile name field, enter a name for the profile (e.g., “Screen Lockout Settings”).
2. Under Settings, click + Add Settings.
3. In the search bar, type Lock Screen or Idle to find the appropriate settings.
4. Select the Lock Screen settings category.
5. Under Lock Screen, configure the following settings:
   • Minutes of inactivity until screen locks: Set the time in minutes after which the device will automatically lock when idle (e.g., 5 minutes, 10 minutes, etc.).
     • Example: Set it to 5 minutes for automatic lockout after 5 minutes of inactivity.

Step 3: Additional Lock Screen and Security Settings

In addition to setting the screen lock timeout, you can configure other related settings to enhance device security:

1. Require password on wake: Enforce that users must enter a password after the device locks.
2. Idle time before requiring password to unlock: You can define how soon after the device locks the password must be entered (e.g., immediately or after a set period).

Step 4: Assign the Profile to Devices

1. After configuring the lock screen settings, click Next to proceed to the Assignments section.
2. Assign the profile to the desired Groups (device groups or user groups).
   • Choose groups where the lock screen timeout should be enforced.
3. Click Next to review the configuration and then click Create to deploy the profile.

Step 5: Monitor the Deployment

1. Navigate to Devices → Monitor → Device Configuration.
2. Review the status of the deployed configuration profile to ensure it’s successfully applied to the targeted devices.

Step 6: Test the Lock Screen Timeout

1. After the configuration is deployed, test the settings on a target device to confirm the lockout time works as expected.
2. Allow the device to remain idle for the configured number of minutes to ensure it automatically locks.

Conclusion

By using Intune’s Setting Catalogs, you can easily configure a screen lockout time to enforce security policies across your managed devices. This process allows administrators to manage device security efficiently, reducing the risk of unauthorized access to unattended devices.