How to Enforce a 15-Minute Screen Saver Timeout with Password Protection via Intune

Keeping business data secure is a top priority for every organization. One simple, yet effective, way to safeguard your endpoints is by enforcing a screen saver timeout with password protection. If you’re using Microsoft Intune to manage your devices, it’s easy to set this up company-wide in just a few steps. In this guide, we’ll show you exactly how to configure a 15-minute screen saver timeout that requires users to enter their password when they return—giving you added peace of mind against unauthorized access.

Step 1: Create a New Configuration Profile in Intune

1. Sign in to Azure Portal. Begin by logging into the Azure Portal.
2. Open Microsoft Endpoint Manager. In the left navigation pane, search for and select Microsoft Endpoint Manager (sometimes shown as Intune).
3. Start Creating the Configuration Profile. Go to Devices > Configuration profiles > Create profile.
4. Select Platform and Profile Type:
   • Platform: Windows 10 and later
   • Profile type: Templates > Administrative Templates

Step 2: Configure Screen Saver and Password Settings

Within the new configuration profile, use Administrative Templates to set the Group Policy security settings. Here’s what to configure:

• Enable Screen Saver
  Path: User Configuration > Administrative Templates > Control Panel > Personalization.
  Turn on this setting to make sure screen saver will activate.
• Set Screen Saver Timeout
  In the same section, set Screen Saver timeout to 900 seconds (which equals 15 minutes).
• Force a Specific Screen Saver
  Still under Personalization, set the screen saver to scrnsave.scr (the blank screen saver) or choose another if your policy requires.
• Require Password on Resume
  Enable Password protect the screen saver. This ensures users must re-enter their password to resume from screen saver mode.

Step 3: Assign the Profile to Devices or Users

When your configuration is ready, assign it to the appropriate devices or user groups. This can be all devices, specific business units, or teams—whatever fits your security policy. Click Next and then Create to finish setup.

Step 4: Monitor the Deployment

After deployment, monitor your policy to ensure it’s working as intended. Go to Devices > Monitor > Configuration Profiles within Endpoint Manager to check the status and compliance of each device. It’s a good idea to test a few workstations to confirm that, after 15 minutes of inactivity, the screen saver activates and a password prompt appears.

Recap: Key Security Settings

• Enable Screen Saver: Forces screen saver activation.
• Screen Saver Timeout: 900 seconds (15 minutes).
• Force Specific Screen Saver: Can be set to blank or another corporate-approved screen saver.
• Password Protect the Screen Saver: Requires password upon wake.

With these steps complete, you’ve leveraged powerful Group Policy Security Settings and Endpoint Security Management through Intune to keep your workplace secure—and in full compliance with best practices.

Expert Help for Managed IT Services in Canada

Setting up security policies in Intune is just one part of protecting your business. If you want ongoing guidance and proactive IT support, System Support offers Managed IT Services (Helpdesk), Backup Services (Server & Microsoft 365), and complete Cyber Security solutions for businesses of all sizes. Our Toronto-based team supports organizations Canada-wide, helping simplify IT and keep your company running smoothly.

Ready for better peace of mind and modern security? Contact System Support today for a free quote!