Endpoint Central – Extended Checks for Screen Lock and Antivirus

Learn how to configure Endpoint Central to enable Sprinto to automatically monitor screen lock and antivirus compliance checks across staff devices.

Overview

Sprinto’s enhanced integration with Endpoint Central now supports automated monitoring of two additional compliance checks:

• Screen lock - Verifies that devices automatically lock after a defined period of inactivity.

• Antivirus - Detects the presence of recognised antivirus applications on staff devices.

This enhancement reduces the need for manual evidence submission and improves real-time compliance tracking.

This article explains how to configure your ManageEngine account to enable these new checks and how to update the integration in Sprinto.

Prerequisites

Before enabling extended checks, ensure that:

• You have admin access to your ManageEngine account.

• You can create or modify device profiles.

• You have an active ManageEngine integration in Sprinto.

Step 1 – Configure Screen Lock Policy in ManageEngine

Sprinto requires a passcode policy with a maximum idle time of 15 minutes or less to pass the screen lock check.

You can either create a new profile with the required passcode policy or update an existing profile.

To create a new profile:

1. Sign in to your ManageEngine account.

2. On the top navigation bar, select the three-dot menu → Mobile Device Mgmt.

3. In the left navigation pane, select Management → Profiles.

4. Select Create Profile, then choose the target OS (create separate profiles for Windows and macOS).

5. Enter a profile name and description, and select Continue.

6. In the Passcode Policy settings:

   • Set Maximum idle time allowed before auto-lock to 15 minutes or less.

7. Save the profile.

To modify an existing profile:

1. In ManageEngine, go to Management → Profiles.

2. Select the profile that already contains a passcode policy.

3. Edit the Passcode Policy.

4. Update Maximum idle time allowed before auto-lock to 15 minutes or less.

5. Save the changes.

6. Repeat this process for both Windows and macOS profiles.

The screen lock check will fail if the configured idle time is greater than 15 minutes or if no passcode policy is applied.

Step 2 – Update the ManageEngine Integration in Sprinto

After updating your ManageEngine profiles:

1. Sign in to your Sprinto account.

2. Navigate to Settings → Integrations → Active Integrations.

3. Search for ManageEngine and select Manage.

4. Select Update Connection.

5. Connect to the same ManageEngine account used previously. Sprinto will refresh the integration and apply the updated settings.

How Sprinto Tracks Antivirus

Sprinto detects antivirus software by scanning the installed applications list returned by ManageEngine’s API. A device passes the antivirus check if any recognised antivirus application is detected.

Recognised applications include, but are not limited to:

• Microsoft Defender

• CrowdStrike

• Bitdefender

• Sophos

• SentinelOne

• Malwarebytes

• Norton

• Avast / Avira

• McAfee

Sprinto currently checks only for the presence of antivirus software, not whether it is actively running.