Lock Workstation shortcut via GPO

I need a GPO that will place a Lock Workstation shortcut on everyone's desktop.  

What I want is for every user who logs in to have a shortcut on his desktop that will allow him to lock the workstation with a mouse click.

the environ is Server 2008 domain w/ Win7 Workstations.

Can someone help me out with this?


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Create a GPO (or use an existing GPO) which applies to the relevant users.

Edit the GPO and browse to User Configuration -> Preferences -> Windows Settings -> Shortcuts.

Right click the blank space in the right hand pane and click New -> Shortcut.

Use the settings in the attached image.

Screenshot of settings.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Robin CMSenior Security and Infrastructure EngineerCommented:
Use a Group Policy Preference to create the following shortcut:
C:\Windows\System32\rundll32.exe user32.dll,LockWorkStation
You can assign it an icon, e.g. I use a padlock symbol found in C:\Windows\System32\shell32.dll
crp0499CEOAuthor Commented:
Thank you Chris.
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Just realised, the location field in the above screenshot should be "Desktop".
crp0499CEOAuthor Commented:
Yep, I caught that.  Thank you again.
crp0499CEOAuthor Commented:
Sorry to bug you Chris, but this isn't showing up on the desktop.  It's written as you specified and applied to the right OU and filtered by user.  Thoughts?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.