View Source

Screen lock allows a computer when idle for a certain amount of time to lock itself, requiring re-entering the user's credentials. This prevents the situation of a user leaving the computer accessible to all, ensuring data is not compromised. Cornell policy recommends every 15 minutes or less of idle time.

Windows

(As of Windows 10 Fall Creators Update, all computers are automatically set to lock when idle. Only admin privileges can change this)

Settings → System → Power & Sleep
The setting for screen is the amount of time left idle before the display turns off and the computer locks

CM

Follow the instructions here to connect to the CM console
Monitoring → Reporting → Reports → Power Management - Power Settings
Choose the collection (ex: AS-CHM-Dept-all) and "View Report" to generate the report. May seem somewhat slow, but in reality it is generating a pretty large report.
In general, focus on "plugged in" values for all, but also check the "on battery" values for laptops
Clicking on the number of computers next to a certain value will present a list of all of the computers with that value
- The first setting, "Turn off display after" will list values relating to the time idle before turning the screen off.
  - IMPORTANT: Keep in mind the values regarding times are in seconds
- The third setting, "Require a password on wake up" will generate a quick number of computers that require or do not require password upon wake up

TIP: To navigate quickly, once in the report of computers with a certain value, change the value and click "View Report" to generate the respective report.