Stop students from locking desktops

[Zammo]

Hello all,

 

I was wondering if anyone can help me with a GPO\Reg Fragment for the following scenario(s):

 

a) Teachers\Staff members can lock workstations, students cannot

b) Anyone can lock a workstation, however they can be unlocked by teachers\staff only.

 

At the moment I have worked out how to stop *any* user locking the system, but ideally I would like to allow teachers to be able to lock any desktop they sit at. I understand I could have two policies, one for teacher computers and one for students however their are a few machines that are used by both.

 

How to hide the start menu lock button? is the closest solution I have so far

 

We are using Windows 7 across the school, and Server 2008 R2

 

Thanks

[snagrat]

GPO

User\Admin Templates\System\CtrlAltDel\Remove Lock Computer

[fiza]

You can do this separately for teachers and students even if they use the same computers as it is a user policy not a computer policy. You should have a different user policy for staff and students so just use these to allow or disallow locking of computers.

[Zammo]

Thanks guys, that worked a treat!