Jump to a topic... Anti-Virus (McAfee) AU Access AU Dial AU Install AU Lease AU Office AU Partners AU Wireless Banner Biggio Center Blackboard Cable TV Cisco Clean Access Agent Cisco VPN Client Classroom Design Group Computing Labs Data/Telephone Requests DHCP E-mail (Alias) E-mail (General) E-mail (GroupWise) E-mail (Listserv) E-mail (PDAs) E-mail (Phishing) E-mail (TigerMail) E-reserves Faculty Development Center Guest Accounts Hardware Sales (Depts) Hardware Sales (Emp/Stu) Instructional Multimedia Group Internet Browsers Internet2 IP Addresses Networks & Servers OIT Intranet Operating Systems Passwords PINs Privacy Satellite Uplink Facility Software Sales (Dept) Software Sales (Emp/Stu) Software Support Chart Spyware/Malware Student Organizations Student PC Shop Technology Enchanced Classrooms Test Scoring & Scanning TechStart Telephone: Dorms Telephone: Cell Phone Service Telephone: Dept/Emp Telephone: Voice Mail TSM (Tivoli Storage Manager) User Names Video Conferencing Webspace & Development

Home > IT Policies > Auburn University Computer Authentication Policy

Computer Authentication Policy

Policy Date: 2/6/2007

Responsible Office: Office of Information Technology

I. PURPOSE

To ensure that only authorized users have access to Auburn University computers.

II. POLICY

Auburn University computers will be configured to require authentication at startup.  When possible, authentication will be done through official domain facilities, otherwise authentication will be established on each individual machine.

Auburn University computers will be configured to have a screen lock that engages after no more than 30 minutes of inactivity and which requires re-authentication. When possible, the screen lockout will be controlled through official domain.

III. EFFECTIVE DATE

Immediately upon policy approval

IV. APPLICABILITY

All university computers - see Exclusions below

V. RESPONSIBILITY

OIT and College/School/Department system administrators and/or individual computer owners with computer administrative authority.

VI. DEFINITIONS

 

VII. PROCEDURES

OIT and College/School/Department system administrators will provide instruction to configure all supported operating systems.

VIII. SANCTIONS

First offense: A request is made to the individual with administrative authority for the machine to bring it into compliance, and to convey subsequent sanctions.

Second offense: A request is made to the individual with administrative authority for the machine to bring it into compliance, and to convey subsequent sanctions, manager cc’d.

Subsequent offenses: Machine is disconnected from the network until in compliance.

IX. EXCLUSIONS

Exclusions will be determined by the OIT or distributed IT staff. Excluded machines should be locked down to the extent possible while continuing to provide the necessary functions.

Machines with a requirement for public access where physical access is controlled/monitored or the machines are configured to have limited access to the network – e.g. Public access machines in the Library.

Machines in a classroom environment, physical access should be controlled or monitored.
Machines configured for group access which have a common logon. Physical access should be controlled or monitored and/or network access restricted.

Individual College/School/Departments may choose to implement a shorter screen lockout interval.

X. INTERPRETATION

CIO, Executive Director OIT

APPENDICES

 

FINAL APPROVAL: Executive VP, Provost, Banner Executive Committee DATE: 04/13/2007