Source: https://sprinto-test.docs-staging.pageloop.ai/monitors/extended-checks-in-mdm-tool-comms/endpoint-central-extended-checks-for-screen-lock-and-antivirus

# Endpoint Central – Extended Checks for Screen Lock and Antivirus

### **Overview**

Sprinto’s enhanced integration with **Endpoint Central** now supports automated monitoring of two additional compliance checks:

- **Screen lock** - Verifies that devices automatically lock after a defined period of inactivity.
- **Antivirus** - Detects the presence of recognised antivirus applications on staff devices.

This enhancement reduces the need for manual evidence submission and improves real-time compliance tracking.

This article explains how to configure your ManageEngine account to enable these new checks and how to update the integration in Sprinto.

### **Prerequisites**

Before enabling extended checks, ensure that:

- You have admin access to your ManageEngine account.
- You can create or modify device profiles.
- You have an active ManageEngine integration in Sprinto.

### **Step 1 – Configure Screen Lock Policy in ManageEngine**

Sprinto requires a **passcode policy** with a maximum idle time of 15 minutes or less to pass the screen lock check.

You can either create a **new profile** with the required passcode policy or update an **existing profile**.

#### **To create a new profile:**

1. Sign in to your **ManageEngine** account.
2. On the top navigation bar, select the **three-dot menu** → **Mobile Device Mgmt**.
3. In the left navigation pane, select **Management** → **Profiles**.
4. Select **Create Profile**, then choose the target OS (create separate profiles for Windows and macOS).
5. Enter a profile name and description, and select **Continue**.
6. In the **Passcode Policy** settings:
   - Set **Maximum idle time allowed before auto-lock** to **15 minutes or less**.
7. Save the profile.

#### **To modify an existing profile:**

1. In **ManageEngine**, go to **Management** → **Profiles**.
2. Select the profile that already contains a passcode policy.
3. Edit the **Passcode Policy**.
4. Update **Maximum idle time allowed before auto-lock** to **15 minutes or less**.
5. Save the changes.
6. Repeat this process for both Windows and macOS profiles.

> [!INFO]
>
> The screen lock check will fail if the configured idle time is greater than 15 minutes or if no passcode policy is applied.

### **Step 2 – Update the ManageEngine Integration in Sprinto**

After updating your ManageEngine profiles:

1. Sign in to your **Sprinto** account.
2. Navigate to **Settings** → **Integrations** → **Active Integrations**.
3. Search for **ManageEngine** and select **Manage**.
4. Select **Update Connection**.
5. Connect to the same ManageEngine account used previously. Sprinto will refresh the integration and apply the updated settings.

### **How Sprinto Tracks Antivirus**

Sprinto detects antivirus software by scanning the installed applications list returned by ManageEngine’s API.\
A device passes the antivirus check if **any recognised antivirus application** is detected.

Recognised applications include, but are not limited to:

- Microsoft Defender
- CrowdStrike
- Bitdefender
- Sophos
- SentinelOne
- Malwarebytes
- Norton
- Avast / Avira
- McAfee

> [!INFO]
>
> Sprinto currently checks only for the presence of antivirus software, not whether it is actively running.