Unlock with SecurID PIN or Windows password GPO

[AdrianJones]

Agent for Windows 7.3.3

GPO "Unlock with SecurID PIN or Windows password"

2 questions:

1. Could you confirm what the time-out does exactly. Does it work on elapsed time since the User last authenticated with SecurID credentials or is it the elapsed time the User last unlocked the device ? Just trying to understand if User keeps locking and unlocking their device regularly when they would next get challenged for SecurID credentials.

2. What impact does putting device into Hibernate or Sleep mode have on this policy ?

[EdwardDavis · Accepted solution]

1) In agent 7.3.3 build 114 and up, you can choose either of these two:

session lock, using Microsoft SENS (system event notification) timer event when desktop was locked

-or-

time since passcode was last used on the system, a different timer than Microsoft SENS

below 7.3.3.114, you only have one option and it is time since desktop was locked (SENS)

2) hibernate and sleep...you'll need to test what this does to your setup. It may vary depending on a variety

of factors and policies on the system, but if there is any logoff event, timer cancels and passcode is needed. 

[I will venture to say it will need the full passcode]

[AdrianJones]

Thanks for that reply - very useful.

Are there any more details available on how to choose which timer method to use from 7.3.3.114 onwards ?