Secfix Agent: report the inactivity timeout for screen lock, not only the grace period
The "Configured Screen Lock" value in the Secfix Agent shows the grace period: the time after the screen turns off before a password is required. On my macOS, this shows as 0.0833 min on the Computers page.
Problem: The grace period doesn't show how long a device can stay idle before it locks. A Mac with the display set to never turn off would still report 5 seconds.
Requested improvements
Show the inactivity timeout, meaning how long a device can sit idle before the screen turns off or locks.
Flag it against a configurable threshold (e.g. ≤ 5 min) so admins can see compliance at a glance.
Check battery and plugged-in settings separately. macOS and Windows allow different timers for each, so a device can be compliant on battery but not when plugged in. Reporting the less strict of the two would be a reasonable default.
Log in to comment and vote
No comments yet
Be the first to share your thoughts.