Link to home
Start Free TrialLog in
Avatar of get-ADuser -F ($_.Name -eq "Todd")
get-ADuser -F ($_.Name -eq "Todd")Flag for United States of America

asked on

Windows 2008 R2 Server as RDS.. (How To Enable/Disable Lock Computer Option)

I have been looking everywhere and must not be asking the question right.  I have inherited an RDS server which is used by THIN Clients only.  I have a request of a user to be able to go to the start menu and click the "Lock" button.  (right where the Logoff/Disconnect is).  Now somewhere in Group Policy (as we are on a domain and RDS users have a policy in place) this is turned off so as not to allow it.  When clicked it does nothing.  I did find that in GP that User Config/Policies/Admin Template/Start Menu and Taskbar, they have Remove shutdown, restart, sleep, enabled.  Which as it should be.  But where is it that I change the Lock or "Lock This Computer".   I know it is here somewhere, because I can RDP into the server (As my own administrator profile) and it locks just fine.  Just like a Ctl Alt Del,,, but they cant to that as normal users on their thin clients.  I am going a little insane.  It should be easy, but cant find it anywhere.

Any help is much appreciated.
ASKER CERTIFIED SOLUTION
Avatar of Mahesh
Mahesh
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Here is link of how to disable the "Lock" option. You may have this Regkey configured

http://community.spiceworks.com/topic/79131-how-to-disable-lock-option-on-windows-svr-2008-terminal-server-for-rdp-users

If you have the following key, just remove it or set it to "0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=dword:00000001

Open in new window

Avatar of get-ADuser -F ($_.Name -eq "Todd")

ASKER

I actually read that one Svet and almost did that.  But I knew since I was admin and it worked, there had to be something set.  I found it. but Mahesh wins the prize.  Something so simple as ctl alt "end"!!!  Learn something everyday.  I am using this solution because even with the "Lock computer" open it is too close to LOGOFF which is the only other option available on start menu.  People accidently log off.  BUT,,, if you want to know where it is GPO style, it is User Configuration\Policies\Admin Templates\System\CTRL+ALT+DEL Options.   I seriously thought it was in Start Menu and Taskbar.  (and I think it should be).   Thanks so much for getting back to me.  Now to train everyone to do the Ctl Alt End and not the Del!...  Thanks so much!!
Excellent solution to problem and so simple.  Perfect.