Authentication Policy
If you’re planning on writing a policy defining the rules of user authentication, here’s a short and sweet Authentication Policy from Auburn University that might be a helpful reference.
Here’s an excerpt:
I. PURPOSE
To ensure that only authorized users have access to Auburn University computers.II. POLICY
Auburn University computers will be configured to require authentication at startup. When possible, authentication will be done through official domain facilities, otherwise authentication will be established on each individual machine.Auburn University computers will be configured to have a screen lock that engages after no more than 30 minutes of inactivity and which requires re-authentication. When possible, the screen lockout will be controlled through official domain.
There’s probably more that you should include but this is a good start.