Visitor Management

School Entrance Security Requirements: What State Rules Say About Vestibules, Single Points of Entry and Visitor Checks

Positive Proof Security Team·November 1, 2026·15 min read
Share
A visitor in a blue jacket waits at the front-office window inside a school's entrance vestibule, with the closed inner glass doors and an empty hallway beyond

The school entrance provisions reviewed here come from state statutes, adopted state rules and grant-related criteria, and they differ in what they ask for, which schools they cover and when. They ask for some combination of four things at the door visitors use: an entrance designated for visitors, a secured vestibule, control of that entrance with locks, cameras or an intercom, and a check of who comes in. Several of the same provisions also address other exterior doors. Whether a provision covers a given school depends on the state, the kind of school and often whether the building is new, renovated or grant-funded.

This guide covers eleven selected states and the federal guidance and grant materials we reviewed. A state that is not listed may still have requirements. It is a summary, not legal advice: check the provision that applies to your building before you plan work or apply for a grant.

Three distinctions that decide what applies to your school

  • Legal force. A statute or an adopted state rule binds the schools it names, within its conditions: here, Kentucky, Tennessee, New Jersey, Florida and Delaware by statute, and Texas, Utah and Wyoming by rule. Grant-related criteria shape what a funded project includes rather than binding every school: Connecticut's statute directs criteria for specified grant programs, and Pennsylvania's document sets baseline criteria for grant-funding use, so what an individual award requires depends on its grant terms. Some laws require a local policy or practice and set what it must contain: Vermont requires board policies, Kentucky requires school access practices, and Utah specifies the content of visitor protocols a local education agency establishes. Guidance, such as the CISA guidance reviewed here, recommends practices without requiring them.
  • Who is covered. Some provisions cover public schools only, some reach charter, private or church-related schools, and some apply only to buildings in a state facilities program.
  • When it applies. Several provisions apply only to new construction or to renovation above a threshold, from a stated date, or only to the renovated part of a building. Others apply to existing buildings now.

What entrance provisions ask for

An entrance designated for visitors. For school districts and charter school governing boards, Florida's school safety requirements apply from 30 minutes before school starts until 30 minutes after it ends; within that window, access points into the "exclusive zone", the campus area beyond a single point of entry, must remain closed and locked when students are on campus, subject to specified exceptions. Tennessee's section 49-6-817 limits access to a school's primary entrance, unless school policy determines otherwise, while students are present during the school day or outside regular hours for school-related purposes. For new school construction undertaken by a district or the development authority, New Jersey requires a single public entrance to be used during the school day.

A secured vestibule. Texas defines a secure vestibule as "a secured space with two or more sets of doors and an office sign-in area", whose inner doors stay closed, latched and locked until the visitor has been visually verified. Tennessee describes two separate sets of doors, each capable of being locked separately, so that no one enters until a school employee authorizes it.

Control of the entrance. Kentucky requires local boards of education to require each school council, or the principal where no council exists, to develop and follow access practices that include controlling the main entrance "with electronically locking doors, a camera, and an intercom system". For new construction and existing school buildings, New Jersey requires districts or the development authority, as applicable, to use an access control system whose doors can be released remotely, an intercom and fixed cameras at the main entrance.

A check of who comes in. Kentucky's required school access practices include having all visitors report to the front office, provide valid identification, state the purpose of the visit and visibly display a visitor's badge. Vermont's required visitor policies must require all visitors to "sign in at a centralized location prior to gaining full access". For instructional facilities covered by Texas's rule, a primary entrance without a secure vestibule must have a location for a visitor check-in and check-out process.

State by state: what the provisions require, and of whom

Each entry gives the kind of provision, what it asks for at the visitor entrance and what it says about other exterior doors, with each duty's scope and dates beside it. Each state's text was read from its official publication when this guide was prepared. Tennessee's provisions are stated from its three enacted acts read in sequence; the full current sections were not read, only the official code publisher's search-result excerpts. Our state door pages carry more detail.

Texas

  • Kind: adopted rule, Texas Administrative Code section 103.1215, effective September 1, 2026.
  • Covers: instructional facilities owned, operated or leased by a public independent school district or public open-enrollment charter school, regardless of construction or lease date.
  • Visitor entrance: unless a secure vestibule is present, a way to see who is seeking entry (windows, cameras or intercoms), a physical barrier against unassisted visitor access, and a visitor check-in and check-out location. Any exterior door the school system intends visitors to use during school hours, through policy or practice, also counts as a primary entrance.
  • Other exterior doors: closed, latched and locked, except, for example, while actively monitored; inspected at least weekly during school hours. More on our Texas page.

Kentucky

  • Kind: statute, KRS 158.162, the section on each school's mandatory emergency management response plan. It was last amended effective July 15, 2024. The Legislative Research Commission's published statute still shows that version, and the 2026 Regular Session's enacted-bill summaries we reviewed identify no amendment to it.
  • Covers: schools under local boards of education; the board must require the school council, or the principal if no council exists, to develop and follow the access practices.
  • Visitor entrance: main entrance controlled with electronically locking doors, a camera and an intercom; visitors report to the front office, provide valid identification, state their purpose and display a badge.
  • Other exterior doors: controlling outside access to exterior doors during the school day. More on our Kentucky page.

Tennessee

  • Kind: statutes, T.C.A. 49-6-817 ("School building entrances required to be locked") and 49-6-818 ("School buildings constructed or remodeled after July 1, 2023"). Public Chapter 367 enacted both. Public Chapter 1005 changed only the window-film wording of 49-6-818(a)(2). Public Chapter 448 amended that section again.
  • Visitor entrance (vestibule): at least one secure vestibule as the primary entrance in public and public charter school buildings constructed or remodeled after July 1, 2023; in a remodel, only the remodeled portions. Construction is dated by approval of the building plans or issuance of the construction permit, whichever occurs first, and "remodeled" has its own statutory definition, which excludes routine maintenance and similar work.
  • Other exterior doors (locking): every public school operated by an LEA, public charter school, private school and church-related school must keep all exterior doors locked at all times, with access limited to the primary entrance unless school policy determines otherwise, to prevent unauthorized entry while students are present during the school day or outside regular hours for school-related purposes or activities. Outside regular hours, the lock on the primary entrance may be released during a school-related event or activity if a school or LEA employee physically present at the door continuously monitors it. State and local law enforcement may inspect entrance or exit doors at LEA and public charter school buildings. More on our Tennessee page.

New Jersey

  • Kind: statute, N.J.S.A. 18A:7G-5.2 ("Public school facilities, certain, security measures required").
  • Covers: districts and the development authority, as applicable.
  • Visitor entrance, new construction: a single public entrance used during the school day, equipped with a security vestibule whose interior doors staff release.
  • Visitor entrance, new and existing buildings: access control whose doors can be released remotely, an intercom and fixed cameras at the main entrance, and secure vestibules where the footprint allows and funding is available.
  • Other exterior doors, new and existing buildings: locked, and staffed and monitored when used for a large entry or exit; a policy that strictly prohibits propping doors and directs everyone to the main entrance. More on our New Jersey page.

Florida

  • Kind: statute, section 1006.07, Florida Statutes ("District school board duties relating to student discipline and school safety").
  • Covers: school districts and charter school governing boards, from 30 minutes before to 30 minutes after the school day.
  • Visitor entrance: the campus beyond a single point of entry is an exclusive zone; staff may admit authorized visitors electronically or manually.
  • Other exterior doors: exclusive-zone access points closed and locked when students are on campus, subject to statutory exceptions, including attended or actively staffed access points; schools without a secure exclusive zone have separate locking requirements and exceptions. More on our Florida page.

Utah

  • Kind: adopted rule, R698-13, current version effective August 27, 2025. It states that it covers public and private schools. It requires immediate compliance for new school building construction and design projects and sets school year 2034-2035 for "limited entry points" in existing buildings; this guide does not determine how that category applies to each entry duty.
  • Visitor entrance: for schools that have grades five to twelve, a managed point of entry with proper visitor management from no later than ten minutes after the first bell until the final bell. For schools that have kindergarten to grade four, the same from no later than 20 minutes before the first bell, with a secured point of entry from ten minutes after the first bell until the final bell.
  • Other exterior doors: access doors, gates and other access points operate as intended, remain closed and locked and allow emergency egress. More on our Utah page.

Vermont

  • Kind: statute requiring a local policy, 16 V.S.A. 1484 ("Access control and visitor management policy").
  • Covers: supervisory union, member district and supervisory district boards, covering school sites and offices; approved and recognized independent schools must adopt consistent written policies.
  • Visitor entrance: all visitors sign in at a centralized location.
  • Other exterior doors: locked during the school day, with an exception for specific structures. More on our Vermont page.

Wyoming

  • Kind: adopted adequacy standard, School Facilities Commission rules, Chapter 3, in effect since 05/09/2024.
  • Covers: buildings and facilities subject to the School Facilities Commission's rules.
  • Visitor entrance: a single point of entry for visitors, a secured vestibule, main entry control systems and a visitor management system.
  • Other exterior doors: exterior door locks; video at the main entry and other building entrances. More on our Wyoming page.

Delaware

  • Kind: statute, Delaware Code section 2306 ("Safety features in new school construction or major renovations"). Its latest amendment was approved in June 2026.
  • Covers: new school construction and renovations meeting the Major Capital Improvement Program cost threshold; the original act does not apply to projects whose certificate of necessity was issued on or before its effective date.
  • Visitor entrance: a secured vestibule as the primary entrance "to screen visitors", with an intercom or video call box and interior doors staff can release electronically; ballistic-resistant glass or other ballistic-resistant material, or security film, in all secured vestibule, lobby and office areas used to screen visitors.
  • Other exterior doors: section 2306 sets safety features for the entrance areas above and names no other exterior door.

Connecticut

  • Kind: a statutory direction to review and update school safety infrastructure criteria for grant programs, C.G.S. 10-292r. It was re-enacted in 2026 by Public Act 26-68, which renamed the advisory council and left these criteria unchanged.
  • Covers: state school building project grants and the school security infrastructure competitive grant program.
  • Visitor entrance: criteria must address entryways (double door access, electronic and remote locks, buzzer systems) and penetration-resistant vestibules.
  • Other exterior doors: cameras at all entrances and exits; remote locks on all entrances and exits. More on our Connecticut page.

Pennsylvania

  • Kind: state committee baseline criteria, PCCD Physical Security Baseline Criteria, approved June 3, 2026.
  • Covers: school entities using the state committee's baseline criteria for grant-funding purposes; the document alone does not establish which levels an individual award requires.
  • Visitor entrance: Level one, a buzz-in entry with visual observation and a log of visitors and packages. Level two, an electronic visitor management system, and buffer areas, holding areas or vestibules at most main entry points. Level three, those areas at all main entry points.
  • Other exterior doors: Level one, working locks on all exterior doors. Level two, an alarm when exterior doors are propped or left open, and cameras monitoring all exterior doorways. Level three, doors that can be locked or sealed remotely. More on our Pennsylvania page.

The other exterior doors

A secure visitor entrance does not by itself secure other exterior doors, and most of the provisions above also regulate those doors, in different ways: locking, scheduled inspection, staffing and monitoring when a door is open for crowds, a rule against propping, cameras or remote locks. Texas also requires exterior door locations to carry interior and exterior alphanumeric markings under the rule's numbering specifications; the primary entrance does not require numbering. Our guide to school exterior door security and Stop the Prop cover those doors in detail.

What Texas audits found at the door

TEA's 2024-2025 annual report includes findings from intruder detection audits and from separate district vulnerability assessments. In that school year's audit cycle, inspectors carried out unannounced intruder detection audits of 8,244 campuses. In 2.46% of the audits, inspectors were able to gain unauthorized entry, and in 88.67% of those successful entries they got in through a secondary entrance rather than the primary one. In 51.23% of those successful entries, the inspector reached the office without being stopped or approached. These are inspectors testing campuses during audits, not criminal break-ins. These audits predate the rule's provisions, effective September 1, 2026.

The separate vulnerability assessment covered about 30% of Texas districts in the same year. It reported check-in areas with a physical barrier at 98.48% of assessed campus primary entrances. It also found that 36.57% of assessed campuses had one or more exterior access points that were not closed, latched and locked, or whose door did not automatically close, latch and lock properly. Our guides to the Texas intruder detection audit and the district vulnerability assessment explain both processes.

Federal guidance and grants we reviewed

The federal materials reviewed here are security guidance and grant documents that list allowable costs and conditions. CISA's school security guide describes single points of entry, "often accompanied by electronic visitor management systems", and treats vestibules as a way to delay a threat. It recommends keeping points of entry locked when staff are not monitoring them, and policies that keep all exterior doors closed outside arrival and dismissal, and it suggests allowing alternative forms of identification. The COPS Office School Violence Prevention Program application resource guide lists entry control equipment, door locking mechanisms and visitor management systems as example eligible items. The BJA STOP School Violence funding notice directs applicants seeking target hardening equipment to the COPS program.

A front-entrance checklist

This checklist combines practices drawn from different jurisdictions and guidance; it does not determine the requirements that apply to a particular school.

  • First, establish what applies: the kind of school, whether the project is new construction or a renovation and what triggers your state's provision, any grant conditions, and your district's own policy.
  • Clearly designated visitor entry points, with signs at building entrances directing visitors to the designated controlled access point.
  • A way for staff to identify a visitor seeking to enter before the inner door opens.
  • A sign-in or check-in at the office or vestibule, with identification where your state or policy requires it, and a visible badge.
  • A plan for exterior-door locking, numbering and scheduled checks that follows the requirements that apply, their permitted exceptions and emergency egress.
  • A plan for arrival and dismissal, when doors open for crowds and may need to be staffed and monitored.
  • An alarm when exterior doors are propped or left open.

Where visitor management and door monitoring fit

Visitor management and door monitoring support different operational tasks. Neither, alone, makes a school compliant with a provision above: compliance depends on the building, the policies and the practices each provision requires. The vestibule, the locks and the door release are part of the building; visitor management handles the check of who comes in.

At the visitor entrance, Positive Proof Visitor Management checks each visitor at sign-in with instant sex offender registry screening and custom watchlist checks, uses up-to-date custody instructions from the student information system, notifies security discreetly by text or email when someone is flagged, prints a badge with the visitor's photo, and shows who is on campus and why on a real-time dashboard. It has been built and owned by Positive Proof since 2000.

On other exterior doors, Positive Proof Door Monitoring puts a wireless sensor on the door and alerts the people who can act the moment a door is propped, forced or held open past the time the school sets, by text, email, two-way radio or dispatch. Rules are set per door, by time of day and calendar day, so a busy front entrance at dismissal stays quiet while a propped stairwell door does not, and every event is logged. A contact sensor shows a door is closed, not that it is latched or locked, so it works alongside the door checks a school already does; in Texas, its record is sensor-verified evidence attached to the weekly log, not a replacement for it.

Both report to one dashboard, alongside panic alerts and volunteer records, so one login shows who is in the building and which doors are open. See visitor management, our school visitor management buyer's guide, door monitoring and door monitoring versus access control.

Frequently asked questions

Do schools have to have a single point of entry?

It depends on the state and the building. Tennessee's provision limits access to the primary entrance while students are present for school purposes, unless school policy determines otherwise. Florida regulates access to the exclusive zone beyond a single point of entry for district and charter schools within a specified school-day window, with exceptions. Wyoming lists a single point of entry for visitors in its facility adequacy standards. New Jersey requires a single public entrance used during the school day in new district or development-authority construction.

Which states require a secure vestibule at schools?

The provisions reviewed here include Delaware's qualifying new-construction and major-renovation projects, subject to its certificate-of-necessity exclusion; Tennessee public and public charter buildings constructed or remodeled after July 1, 2023 (construction dated by plan approval or permit issuance, whichever occurs first), limited to remodeled portions in a remodel, where "remodeled" excludes routine maintenance, reroofing, painting or wallpapering, asbestos removal, and changes to mechanical or electrical systems that do not affect the building's usability; New Jersey district or development-authority new construction, and existing schools where the footprint allows and funding is available; and Wyoming buildings subject to the School Facilities Commission's adequacy standards. Texas's covered public-school instructional facilities may use a secure vestibule under its primary-entrance rule. Connecticut's statute requires grant-related criteria to address penetration-resistant vestibules, and Pennsylvania's level two and level three criteria list buffer areas, holding areas or vestibules at most or all main entry points.

Do schools have to check visitor ID?

Some do. Kentucky requires local boards to require school access practices under which visitors report to the front office and provide valid identification. If a Utah local education agency establishes visitor protocols, they must require government-issued identification or other identification the agency accepts. Vermont's required visitor policies require sign-in at a centralized location. CISA's guidance suggests allowing alternative forms of identification.

Do school entrance rules apply to charter and private schools?

Some do. Tennessee's door-locking provision covers public charter, private and church-related schools as well as public schools, and Utah's school safety rule states that it covers public and private schools. Florida's requirements apply to charter school governing boards, and Texas's rule covers open-enrollment charter schools. Vermont requires approved and recognized independent schools to adopt consistent written policies.

PP

Positive Proof Security Team

The Positive Proof team has protected schools and facilities for over 25 years, deploying visitor management, panic button, and safety solutions across 13 industries nationwide.

Share

STAY INFORMED

Security Insights Delivered to Your Inbox

Get the latest school safety guidance, compliance updates, and security best practices from the Positive Proof team.

No spam. Unsubscribe anytime.

Ready to See Positive Proof in Action?

A 30-minute demo is configured to your facility type, industry, and compliance requirements.

Request a Demo