Deny the ability to unlock a locked workstation.

Hi!  I was wondering if there is a way to deny users the ability to unlock a locked workstation.  I lock my computer when I walk away from it, but the other IT guy here is always unlocking my computer on me.  This is a problem because I have Outlook set to SMS my reminders to me, and when he logs me out, I don't get my reminders.  Is there any way to set my workstation so I am the only one that can unlock it?  Thanks!
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hi johnny_cache,

why do you guys have each others password, best advice i could give is create personal accounts that only you have a password too, you cant block someone unlocking a machine as you effectively lock yourself out

Administrators and the user who locked the computer will have the ability to unlock the computer. Also I looked at the group policy I don't think it can be done.
The above answer is assuming the IT guy has admin privileges.
Cloud Class® Course: SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.


Take a look at this USB Security Gadget. Maybe something to consider if you want to splash a bit of cash.

dont worry , try this tweak and read the disclaimer below before trying is tweak

Disable Unlock Windows by Admin password..
computer administrator to unlock Windows session by using Administrator's password.
This is useful when user left workstation and cannot unlock it.
This tweak allows to disable unlocking Windows by Administrator.

Key:  HKEY_LOCAL_MACHINE \ Software \ Rohos  
Value Name:  DisableAdminUnlock  
Data Type:  DWORD  
 1- disable unlocking Windows by Administrator;  

for instructions on how to create a registry key, follow below

Most of mentioned  values (tweaks) should be created manually. Here's how to create value in the registry:

Click "start"
Choose "run" item
In the Run dialog type "regedit" and press OK.
Regedit window (Windows Registry editor) will appear.
Navigate to certain "Key" (HKEY_LOCAL_MACHINE \ ...) using left panel.

and also please read the
Modifying the registry can cause serious problems that may require you to reinstall your operating system. Experts Exchange LLC or myself cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.

Modifying the registry is recommended only for Power users or system administrators.

i wanted to post this disclaimer since my answers should not affect in anyway the company or the user ! if the administrator feels that placing disclaimer is unnecessary then he can remove it at any cost !

johnny_cacheAuthor Commented:
We don't have each other's passwords, we are both domain admins on the network.  By default we can unlock anyone's computer we want.  I am looking for a way to exclusively lock my computer so I am the only one that can unlock it.  I also looked through Group Policy and didn't see anything, I kinda was hoping I missed it.
johnny_cacheAuthor Commented:
smartjen4u - that requires a third-party software to work, and I'm trying to avoid installing any software.  Thanks for the suggestion though!
The simpliest way would be to remove the "domain admin" group from the local administrators group on your PC only then add your domain ID as the admin for the machine.  Is there another reason he would need to be admin on your machine other than by default?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
windows doesnt provide a "prevent one admin from unlocking another admin" rule. thats the way it is, you cant prevent someone unlocking a machine like that from my experience

though saying that if someone else has a solution.......
layman idea here, you could take your keyboard/ mouse. away then they cannot unlock it and it sure sends a message when they wonder where and why you have removed them.
Seeing you dont want to use any software.
there is a few that can lock your keyboard and mouse.
Here is some you can look at
Cheers Merete
johnny_cacheAuthor Commented:
la_pepe59, that worked!  thanks for the tip, the points are yours!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.