Windows 2008 R2 Server as RDS.. (How To Enable/Disable Lock Computer Option)

I have been looking everywhere and must not be asking the question right.  I have inherited an RDS server which is used by THIN Clients only.  I have a request of a user to be able to go to the start menu and click the "Lock" button.  (right where the Logoff/Disconnect is).  Now somewhere in Group Policy (as we are on a domain and RDS users have a policy in place) this is turned off so as not to allow it.  When clicked it does nothing.  I did find that in GP that User Config/Policies/Admin Template/Start Menu and Taskbar, they have Remove shutdown, restart, sleep, enabled.  Which as it should be.  But where is it that I change the Lock or "Lock This Computer".   I know it is here somewhere, because I can RDP into the server (As my own administrator profile) and it locks just fine.  Just like a Ctl Alt Del,,, but they cant to that as normal users on their thin clients.  I am going a little insane.  It should be easy, but cant find it anywhere.

Any help is much appreciated.
LVL 4
get-ADuser -F ($_.Name -eq "Todd")I.T. ManagerAsked:
Who is Participating?
 
MaheshConnect With a Mentor ArchitectCommented:
You can ask users to hit Ctrl+Alt+End on thin clients to pops up lock computer option hopefully and check if it works

Mahesh
0
 
Svet PaperovIT ManagerCommented:
Here is link of how to disable the "Lock" option. You may have this Regkey configured

http://community.spiceworks.com/topic/79131-how-to-disable-lock-option-on-windows-svr-2008-terminal-server-for-rdp-users

If you have the following key, just remove it or set it to "0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=dword:00000001

Open in new window

0
 
get-ADuser -F ($_.Name -eq "Todd")I.T. ManagerAuthor Commented:
I actually read that one Svet and almost did that.  But I knew since I was admin and it worked, there had to be something set.  I found it. but Mahesh wins the prize.  Something so simple as ctl alt "end"!!!  Learn something everyday.  I am using this solution because even with the "Lock computer" open it is too close to LOGOFF which is the only other option available on start menu.  People accidently log off.  BUT,,, if you want to know where it is GPO style, it is User Configuration\Policies\Admin Templates\System\CTRL+ALT+DEL Options.   I seriously thought it was in Start Menu and Taskbar.  (and I think it should be).   Thanks so much for getting back to me.  Now to train everyone to do the Ctl Alt End and not the Del!...  Thanks so much!!
0
 
get-ADuser -F ($_.Name -eq "Todd")I.T. ManagerAuthor Commented:
Excellent solution to problem and so simple.  Perfect.
0
All Courses

From novice to tech pro — start learning today.