Locking and unlocking a computer

Members of the group “mwStamford - Policy - STAMLoaner - Block Login” will be blocked from logging in.

What this does:

Pushes out a OMA-URI policy to disable logins.

Once this happens, logging in will be blocked.

 

If you are trying to re-enable a computer, it must be removed from the above group so it no longer gets the disabling policy. After that, you can get back in by either initiating a fresh start to wipe the computer or to turn off the policy:

Logging in with Administrator/LAPS password

Going to a command prompt and typing in GPEDIT to bring up the local group policy console

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignments > Allow Login Locally

Add the following groups:

Administrators

Backup Operators

Guests

Users

 

Note: only recommend disabling the policy if this was somehow applied to the wrong computer.

Related content

Resetting a PC
Resetting a PC
More like this
Locking Your Computer Screen on Windows
Locking Your Computer Screen on Windows
More like this
Resolving an Admin password with LAPS in AD
Resolving an Admin password with LAPS in AD
More like this