Locking and unlocking a computer

Members of the group “mwStamford - Policy - STAMLoaner - Block Login” will be blocked from logging in.

What this does:

Pushes out a OMA-URI policy to disable logins.

Once this happens, logging in will be blocked.

If you are trying to re-enable a computer, it must be removed from the above group so it no longer gets the disabling policy. After that, you can get back in by either initiating a fresh start to wipe the computer or to turn off the policy:

Logging in with Administrator/LAPS password

Going to a command prompt and typing in GPEDIT to bring up the local group policy console

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignments > Allow Login Locally

Add the following groups:

Administrators

Backup Operators

Guests

Users

Note: only recommend disabling the policy if this was somehow applied to the wrong computer.