diff --git a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml index 4233b62a8..7b3bdf82e 100644 --- a/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml +++ b/docs/01-Using-Fleet/standard-query-library/standard-query-library.yml @@ -712,3 +712,16 @@ spec: tags: compliance, hardening, built-in platform: darwin contributors: GuillaumeRoss +--- +apiVersion: v1 +kind: policy +spec: + name: Screen lock enabled (Windows) + query: SELECT 1 FROM registry WHERE path = 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs' AND CAST(data as INTEGER) <= 1800; + description: "Checks if the screen lock is enabled and configured to lock the system within 30 minutes or less." + resolution: "Ask your IT administrator to enable the Interactive Logon: Machine inactivity limit setting with a value of 1800 seconds or lower." + platforms: Windows + tags: compliance, hardening, built-in + platform: windows + contributors: GuillaumeRoss + diff --git a/frontend/utilities/constants.ts b/frontend/utilities/constants.ts index adb1a9c3b..ea98ed55c 100644 --- a/frontend/utilities/constants.ts +++ b/frontend/utilities/constants.ts @@ -159,6 +159,16 @@ export const DEFAULT_POLICIES = [ "Contact your IT administrator to help you enroll your computer in your organization's MDM. If already enrolled, ask your IT administrator to enable the screen lock feature in the profile configuration.", platform: "darwin", }, + { + key: 15, + query: + "SELECT 1 FROM registry WHERE path = 'HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\InactivityTimeoutSecs' AND CAST(data as INTEGER) <= 1800;", + name: "Screen lock enabled (Windows)", + description: "Checks if the screen lock is enabled and configured to lock the system within 30 minutes or less.", + resolution: + "Ask your IT administrator to enable the Interactive Logon: Machine inactivity limit setting with a value of 1800 seconds or lower.", + platform: "windows", + }, ] as IPolicyNew[]; export const FREQUENCY_DROPDOWN_OPTIONS = [