Lock vs Log Off

[OUCATS]

Normally I log off of all my servers when I'm not physically at the server doing work. But recently I had a new copier installed to the network which will scan to a network location and the problem is that there needs to be a program running in the task bar inorder to scan to the network. If I log off, the program shuts down and no network scanning, but if I lock the server, the program continues running in the background and everything is fine.

My question... what is the best or most secure way to sign off of a server when finished doing work and why?

Thanks!

 

[mattjurado]

I think you answered your own question. Some applications which don't run as Windows Services, require you to be logged in. If this is the case, you either need to lock the desktop, or talk to the software people about workarounds. I typically lock my servers, for this very reason.

Matt J.

Please always take the time to backup any and all data before performing any actions suggested for ANY problem, regardless of how minor a change it might seem. Also test the backup to make sure it is intact.

 

[NickFerrar]

Locking is as good as logging out really, I guess you could say you can clear last logged on user name and log out so an attacker doesn't even have the username (which they'll see on a lock out) but I've never seen the need to use such a policy.

We have a mixture of secure and part-secure server rooms, our secure rooms have very limited card access and in these we generally leave the servers unlocked and logged in (unless they are facing an insecure location). Our part-secure rooms are card controlled also but host servers that other company staff have access to, in these there's a strict policy to lock the consoles on our servers.