Best Practices
Desktop Locking
If your computer is in an area where other people may have physical access to it while it is up and running, you should set up an automatic screen saver program with password protection. These programs operate on a timer, so that if you leave your workstation idle for a length of time, the screen saver will engage. If you password protect it, others will not have access to your desktop and open applications in your absence. Another other option is to use manual desktop locking, but of course you have to remember to use it!
Desktop locking is especially important if you leave applications running, and have access to Level III (highly sensitive) information. (See the Institutional Data Policy for University of Iowa data classification descriptions.)
To set up a Screen Saver with Password Protection on Windows:
-
Click Start, Control Panel
-
Click on Display to open the Display Properties window
-
Select the Screen Saver tab
-
In the Screen Saver section, select a screen saver from the selection list. Modify the settings as desired.
-
Check the "On resume, Password Protect" option.
-
Select a timer setting in the "Wait" option. A timer of 10 minutes is recommended, up to a maximum of 20 minutes.
-
Click on "OK" to save.
This will invoke your workstation screen saver when the timer expires. When you press a key to engage your desktop, you will be prompted to enter your workstation password (typically your Hawk ID Password) in order to access your desktop.
Manually engaging the Desktop Lock:
-
Press the control-alt-delete keys at any time, and you'll be presented with an option panel.
-
Select "Lock Workstation"
When you press a key, you will be prompted to enter the control-alt-delete sequence, and then your workstation password, to unlock your desktop.