KB ID 0000851 

Problem

You want to stop your users being able to select the ‘Lock’ option from the Windows 7 power button via group policy.

Solution

1. On a domain controller Windows Key+R> gpmc.msc {enter} > The Group Policy Management Console will open.

2. Navigate to where you want to create your policy, or edit an existing one.

Note: This is a computer policy, make sure the policy is linked to an OU that contains computers NOT users.

3. Navigate to;

[box]

Computer Configuration > Preferences > Windows Settings > Registry

[/box]

4. Right Click > New> Registry Item.

5. Set the following;

Action = Create.
Hive = HKEY_LOCAL_MACHINE
Key Path = SOFTWAREMicrosoftWindowsCutrrentVersionPoliciesSystem
Value name = DisableLockWorkstation
Value type = REG_DWORD
Value data = 1

6. Apply > OK > Close the policy editor.

7. Then either reboot the clients, wait a couple of hours, or manually run “gpupdate /force” on them.

Note: With Server 2012 you can force all computers in an OU to refresh group policy.

Related Articles, References, Credits, or External Links

NA