Computer Locks After 15 Minutes? How to Tell If Group Policy Set It

If your work computer locks after exactly 15 minutes, even while you read or watch a video, and the screen timeout options are greyed out, IT set a policy. On Windows it is usually one of three: the Interactive logon: Machine inactivity limit security policy, a forced screen saver with password, or a device lock pushed through Microsoft Intune. Each locks the PC after a set time without keyboard or mouse input, and none can be changed from your Settings app. The number 15 is not random: Microsoft's and CIS's security baselines, and the PCI DSS card payment standard, all use 15 minutes.

You can find out which policy it is with the commands below, without admin rights. Changing it is a request to IT. If the lock bothers you because it turns your chat status Away, the fix may be elsewhere: Slack Green keeps your Slack status active from our servers during the hours you set, locked screen or not.

Signs the lock comes from a policy

• • The Screen and sleep dropdowns show "Some of these settings are managed by your organization."
• • Screen saver settings are greyed out, or the "On resume, display logon screen" box is ticked and cannot be cleared.
• • The PC locks at the same minute every time, and a video or presentation does not stop it.
• • Setting everything to Never in Settings changes nothing.
• • A coworker with the same laptop model locks at the same time.

If none of these match, the cause is more likely a setting you can change, such as Dynamic lock or a short power timeout. Those fixes are in how to stop Windows 11 from locking.

The three policies that lock a work PC



Policy	Where IT sets it	What you see	Registry value you can read
Interactive logon: Machine inactivity limit	Group Policy, Security Options; or Intune	Locks after N seconds, whatever your power settings say	InactivityTimeoutSecs under HKLM\...\Policies\System
Forced screen saver with password	Group Policy, User Configuration, Control Panel, Personalization	Screen saver starts, then the sign-in screen	ScreenSaveTimeOut and ScreenSaverIsSecure under HKCU\Software\Policies\...
Intune device lock	Intune device restriction or settings catalog	Locks after N minutes; Settings may show a managed note	MaxInactivityTimeDeviceLock under HKLM\SOFTWARE\Microsoft\PolicyManager

Power policies can add to this. If IT also forces a short display-off time and requires a password on wake, the PC may lock a few minutes before the 15-minute mark.

Check which policy locks your PC (no admin needed)

Open Command Prompt (Win+R, type cmd, Enter) and run these three lines. Reading these registry keys does not need admin rights.

:: 1. Machine inactivity limit, in seconds
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v InactivityTimeoutSecs

:: 2. Screen saver forced by Group Policy
reg query "HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop"

:: 3. Intune device lock, if your company uses Intune
reg query "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\DeviceLock"

How to read the results:

• InactivityTimeoutSecs REG_DWORD 0x384 is 900 seconds, which is 15 minutes. 0x258 is 10 minutes, 0x708 is 30 minutes.

• ScreenSaveActive 1, ScreenSaverIsSecure 1 and ScreenSaveTimeOut 900 mean a forced screen saver that locks after 900 seconds.

• A MaxInactivityTimeDeviceLock value is in minutes, set through Intune.

• "ERROR: The system was unable to find the specified registry key or value" means that policy is not set.

To see whether the PC is managed by Intune at all, open Settings > Accounts > Access work or school. A connected work account with an Info button means the device takes policies from your company's management server.

Why IT sets 15 minutes

Most companies do not pick the number themselves. They apply a standard:

• The CIS benchmark for Windows asks for a machine inactivity limit of 900 seconds or less, and not 0.

• Microsoft's own Windows security baseline sets the same 900 seconds.

• PCI DSS version 4, the standard for anyone who handles card data, requires that a session idle for more than 15 minutes asks the user to sign in again (requirement 8.2.8).

• Health and finance companies often cite HIPAA or internal audit rules for the same limit.

So asking IT to "turn it off" usually fails. Asking for an exception for a specific role, such as a shared lab display, has a better chance, because the standards allow documented exceptions.

Can you change it yourself?

On a company PC, no, and you should not try. Three reasons:

You need admin rights to change these settings.

A domain or Intune policy overwrites local changes when it refreshes. Group Policy refreshes about every 90 minutes, plus at each restart.

The lock is a security control. Getting around it can break your company's IT policy, and endpoint software logs changes to it.

On your own PC with Windows Pro, the machine inactivity limit is in gpedit.msc under Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options. Set it to 0 to turn it off. Windows Home has no Group Policy Editor.

What still works on a locked-down laptop

• Lock it yourself with Win+L when you step away, and sign in with Windows Hello to make coming back fast. A face or fingerprint sign-in takes a second.

• Keep documents and videos in apps that continue in the background. Most downloads, renders and builds keep running while the screen is locked; sleep is what stops them.

• Ask IT for Windows Hello or a longer limit if 15 minutes breaks your work.

Input tools such as a mouse jiggler reset the idle timer and so stop the lock. They also stop the security control from working, and IT can see them; see can a mouse jiggler be detected. PowerToys Awake and presentation mode do not help here. They block sleep, but they send no input, so the inactivity limit still locks the PC.

Mac: screen lock set by your company

On a managed Mac, the same kind of rule arrives as a configuration profile. Open System Settings > General > Device Management to see the installed profiles. If "Require password after screen saver begins or display is turned off" is greyed out in Lock Screen settings, a profile sets it. Our guide keep a Mac screen from locking covers what you can change on a Mac you own.

A locked screen and your chat status

A locked PC shows Away in Teams at once and Away in Slack almost at once. If the 15-minute lock is the reason coworkers see you as away while you read on paper or take a call, Slack Green keeps your Slack status active on your working hours from our servers. It does not touch the lock, and nothing is installed on the PC.

Screen lock policy questions

Why does my work computer lock after 15 minutes? A security policy from IT, usually the machine inactivity limit set to 900 seconds, as security baselines and PCI DSS require.

Why is my screen timeout greyed out? Your organization manages it through Group Policy or Intune. Windows says so with "Some of these settings are managed by your organization."

Can I bypass the Group Policy screen lock? Not properly without admin rights, and on a work PC you should ask IT instead.

Does a video stop a policy lock? No. The machine inactivity limit counts keyboard and mouse input only.