Provide method of locking desktop automatically when idle for 15 minutes, requiring the user to log back in with a password; 2-factor authentication not required.
If the session is completely terminated (after 30 minutes of inactivity), the user would sign in per the usual process with 2-factor authentication then required.
