Screen saver policies are essential for protecting company data and boosting endpoint security, especially in shared or office environments. Many IT administrators want to ensure that a blank screen saver kicks in after 15 minutes of inactivity—both for security and energy savings. If you’re managing devices with Microsoft Intune, here’s a friendly, step-by-step guide to set up and enforce this policy quickly.
Why Configure a Screen Saver Policy?
Screen saver policies help lock unattended PCs and hide sensitive data from prying eyes. Enforcing a blank screen after 15 minutes of inactivity is a common best practice in Managed IT Services across Canada. It not only helps with compliance, but it also integrates with other endpoint security management strategies.
Step 1: Create a New Configuration Profile in Intune
- Open the Azure Portal: Sign in at portal.azure.com.
- Access Microsoft Endpoint Manager: In the left menu, search and select “Microsoft Endpoint Manager” (or Intune).
- Create Profile: Go to Devices > Configuration profiles > Create profile.
- Choose Platform and Template:
- Platform: Windows 10 and later
- Profile: Templates > Administrative Templates
Step 2: Configure Screen Saver Settings
- Search for ‘Screen Saver’ settings in the Administrative Templates.
- Enable Screen Saver:
- Path: User Configuration > Administrative Templates > Control Panel > Personalization
- Turn this setting on.
- Set Screen Saver Timeout:
- In the same path, set the timeout to 900 seconds (15 minutes).
- Force a Specific (Blank) Screen Saver:
- Still under Personalization, set the value for ‘Force specific screen saver’ to scrnsave.scr (the Windows blank screen saver).
Step 3: Assign the Profile to Devices
Pick which users or groups need this policy. You can choose “All devices” or target specific departments. Click Next, then Create to deploy your configuration.
Step 4: Monitor and Verify Deployment
After the profile is set, it’s important to verify that settings are actually applied. In Endpoint Manager under Devices > Monitor > Configuration Profiles, check the deployment status. Review to ensure all intended devices now activate a blank screen saver after 15 minutes.
Quick Reference: Key Settings
- Enable Screen Saver: Ensures screen saver is on.
- Screen Saver Timeout: 900 seconds (15 minutes)
- Force Blank Screen Saver: scrnsave.scr
Tips and Additional Considerations
- Adjust timeout or screen saver style as needed for your business needs.
- Consider enforcing password protection on resume for extra security—this is also found under Personalization settings in Intune.
- These steps extend your organization’s business continuity and endpoint security management strategy by limiting unauthorized access to unattended computers.
- Find more ways to protect your infrastructure with services like Cyber Security, Backup Services, and Unlimited Helpdesk Support.
Conclusion: Make Security Easy with Intune Policies
By following these simple steps, you can ensure your business is protected by implementing a 15-minute blank screen saver on all managed Windows devices. Intune makes it straightforward, and you’ll be closer to industry best practices for group policy security settings and endpoint security management.
If you need expert help to set up, monitor, or optimize your IT policies, request a quote from System Support. Our friendly team helps Canadian businesses stay secure, compliant, and productive every day!
