I have set group policy to automatically lock idle workstations after 10 minutes of inactivity. This works great. My question now is, is there any way to include an option where once a machine has been locked that any user with a valid name and password can unlock it instead of just the user who was logged on when the machine locked itself (or an administrator). I realize that the logged on user would "lose any unsaved information," but that is just the consequence of leaving a workstation idle. The reason we need this is that we have some areas where more than one user accesses the same computer, and we dont want to force them to reboot the machine every time it is locked out and the culprit user is not around. Any help appreciated.