Non-profit ensures compliance with time-based access and remote security controls
- Association Tutélaire des Vosges (ATV)
- Non-profit
- France
)
)
)
)
The Association Tutélaire des Vosges (ATV) is a non-profit organization based in Épinal that supports adults placed under legal guardianship in the Vosges department.
“The automatic deployment of UserLock agents enabled full installation in production in less than 24 hours. Everything was smooth and simple. That was essential for a small IT team like ours."
Sébastien Cornuau - IT Systems Manager
The Challenge
In 2017, France introduced the “right to disconnect,” a measure designed to limit the intrusion of digital tools into employees’ private lives.
In practice, however, simply asking employees not to check their email or messaging systems outside of working hours isn’t enough. Technical controls are needed to enforce these boundaries.
For ATV, the challenge was twofold:
Restrict access to business applications to certain time windows,
And secure user accounts with multi-factor authentication (MFA), in the context of an expanding hybrid workforce.
“Our employees have very diverse working patterns. Some work remotely three days a week. We needed to combine time- and location-based rules while also reinforcing the security of remote access."
Sébastien Cornuau - IT Systems Manager
The Solution
Already a longtime client using FileAudit, IS Decisions' file access auditing solution, Cornuau naturally turned to UserLock to implement a consistent access management strategy adapted to the teams' needs.
Thanks to UserLock's integration with Active Directory, implementing time-based access rules was quick: application access could be restricted outside working hours, while maintaining flexibility for specific roles through UserLock’s granular controls.
At the same time, integrated MFA made it easy to secure all remote connections (including RDS and VPN) using one-time codes generated from a mobile authenticator app.
“The ability to restrict access outside working hours is extremely important, especially given the sensitivity of the data we handle."
Sébastien Cornuau - IT Systems Manager
With UserLock, ATV has been able to promote a working environment that supports employee well-being while meeting legal obligations under the right to disconnect.
Employees now have clear limits around when their workday begins and ends, and HR can be confident that the rules are being followed. For the IT department, day-to-day management has become simpler.
“Thanks to UserLock’s time-based restrictions, we no longer receive emails at 3 a.m. And monitoring compliance is easy with UserLock’s automatic email reporting."
Sébastien Cornuau - IT Systems Manager