The DCC Policy for workstations with access to sensitive or restricted material:
- Password protected screen savers (with a 10 minute inactivity time lock) should be applied. This should be done on all workstations, either via a group wide policy on a network, or by setting the screen time-out settings on a standalone device to require a password.
- Workstations are left “Locked” when unattended. This can be done in Windows by pressing WindowsKey+L together or in terminal services by pressing Ctrl+Alt+End then choosing “Lock this computer”
Microsoft article on screen saver timeout.