Screen lock timeout enforcement
· One min read
XFA now supports screen lock timeout enforcement in addition to the existing screen lock enable/disable check.
Previously, XFA only verified whether screen lock was enabled on a device. Now, admins can also configure a maximum allowed timeout duration — and XFA will verify that the device's screen lock timeout is within that limit.
What's new:
- Admins can set a maximum screen lock timeout (in minutes) in their organization's policy
- XFA checks both that screen lock is enabled and that the configured timeout does not exceed the maximum
- Supports macOS, Windows, and Linux with platform-specific timeout detection
- The timeout check works alongside the existing enable/disable check — both must pass for the device to be compliant
This gives organizations tighter control over idle device security, ensuring employees cannot set excessively long timeouts that leave devices exposed.