Microsoft KB Archive/314969

= HOW TO: Create a Desktop Shortcut that Locks a Windows Workstation =

PSS ID Number: 314969

Article Last Modified on 10/13/2003

-

The information in this article applies to:


 * Microsoft Windows XP Professional
 * Microsoft Windows XP Tablet PC Edition
 * Microsoft Windows XP 64-Bit Edition
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows 2000 Professional
 * Microsoft Windows 2000 Server
 * Microsoft Windows Server 2003, 64-Bit Datacenter Edition
 * Microsoft Windows Server 2003, 64-Bit Enterprise Edition
 * Microsoft Windows Server 2003, Datacenter Edition
 * Microsoft Windows Server 2003, Enterprise Edition
 * Microsoft Windows Server 2003, Standard Edition
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows Small Business Server 2003, Premium Edition
 * Microsoft Windows Small Business Server 2003, Standard Edition

-



This article was previously published under Q314969





IN THIS TASK

 * SUMMARY
 * ** Creating a Desktop Shortcut to Lock a Windows Workstation



SUMMARY
This step-by-step article describes how to create a desktop shortcut that you can use to lock a Windows workstation that is a member of a domain network. To take full advantage of user authentication as a means of network access control, you must be sure that only the logged-on user is able to use the workstation. Authentication-based access control loses viability when users other than the logged-on user are able to obtain access to local and network objects.

If a user steps away from his or her desk, another user can walk up to the unattended computer and carry out local and network activities by using the credentials of the logged-on user. The logged-on user is accountable for any activities that took place on that workstation while away from it. If the logged-on user can account for his or her whereabouts during the time away from the computer, the credentials of that user are no longer useful in tracking down access violations that have been completed under the context of that user's network account.

Users can lock their workstations by using the CTRL+ALT+DELETE Security Attention Sequence (SAS). However, some users are reluctant or unable to press these three keys in sequence, and because of this, do not lock their workstations while they are away from the computer.

Note If the user has a keyboard with a Windows key, Windows+L also locks the workstation.

You can simplify locking the workstation for these users by creating a desktop shortcut. After you create the shortcut, users can double-click the shortcut to lock the workstation.

back to the top

Creating a Desktop Shortcut to Lock a Windows Workstation
To create the shortcut:
 * 1) Right-click an empty area of the desktop, point to New, and then click Shortcut.
 * 2) In the Create Shortcut Wizard, type %windir%\System32\rundll32.exe user32.dll,LockWorkStation in the Type the location of the item box, and then click Next. Note that LockWorkStation is case sensitive.
 * 3) On the &quot;Type a name for this shortcut&quot; page, type Lock Workstation in the Type a name for this shortcut box, and then click Finish.
 * 4) Right-click the shortcut you just made, and then click Properties.
 * 5) Click the Shortcut tab, and then click Change Icon.
 * 6) In the Change Icon dialog box, type %SystemRoot%\system32\SHELL32.dll in the Look for icons in this file box, and then click OK.
 * 7) Browse through the available icons, and then select an icon that makes it easy for the users to identify that the shortcut is to be used to lock the workstation. Click the icon you want to use, and then click OK.
 * 8) Click OK.
 * 9) Double-click the shortcut, and note that the workstation automatically locks itself. The user must press CTRL+ALT_DELETE, and then type his or her credentials to unlock the workstation.

back to the top

Keywords: kbenv kbHOWTOmaster kbui KB314969

Technology: kbSBServ2003Pre kbSBServ2003Search kbSBServ2003St kbSBServSearch kbwin2000AdvServ kbwin2000AdvServSearch kbwin2000DataServ kbwin2000DataServSearch kbwin2000Pro kbwin2000ProSearch kbwin2000Search kbwin2000Serv kbwin2000ServSearch kbWinAdvServSearch kbWinDataServSearch kbWinServ2003Data kbWinServ2003Data64bit kbWinServ2003Data64bitSearch kbWinServ2003DataSearch kbWinServ2003Ent kbWinServ2003Ent64bit kbWinServ2003Ent64bitSearch kbWinServ2003EntSearch kbWinServ2003Search kbWinServ2003St kbWinServ2003Web kbWinXPPro kbWinXPPro64bit kbWinXPProSearch kbWinXPSearch kbWinXPTabPC

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.