Create a Desktop Shortcut that Locks a Windows XP-Based Workstation

This step-by-step article describes how to create a desktop shortcut that you can use
to lock a Windows XP-Based Workstation. To take full advantage of user authentication as
a means of network access control, you must be sure that only the logged-on user is able
to use the workstation. Authentication-based access control loses viability when users
other than the logged-on user are able to obtain access to local and network objects.
If a user steps away from his or her desk, another user can walk up to the unattended
computer and carry out local and network activities by using the credentials of the
logged-on user. The logged-on user is accountable for any activities that took place on
that workstation while away from it. If the logged-on user can account for his or her
whereabouts during the time away from the computer, the credentials of that user are no
longer useful in tracking down access violations that have been completed under the
context of that user's network account.
Users can lock their workstations by using the Ctrl+Alt+Del Security Attention
Sequence (SAS). However, some users are reluctant or unable to press these three keys in
sequence, and because of this, do not lock their workstations while they are away from
the computer.
You can simplify locking the workstation for these users by creating a desktop
shortcut. After you create the shortcut, users can double-click the shortcut to lock the
workstation.
To create the shortcut:
· Right-click an empty area of the desktop, point to New, and then click Shortcut.
· In the Create Shortcut Wizard, type %windir%\System32\rundll32.exe
user32.dll,LockWorkStation in the Type the location of the item box, and then click Next.
Note that LockWorkStation is case sensitive.
· On the "Type a name for this shortcut" page, type Lock Workstation in the Type a
name for this shortcut box, and then click Finish.
· Right-click the shortcut you just made, and then click Properties.
· Click the Shortcut tab, and then click Change Icon.
· In the Change Icon dialog box, type %SystemRoot%\system32\SHELL32.dll in the Look
for icons in this file box, and then click OK.
· Browse through the available icons, and then select an icon that makes it easy for
the users to identify that the shortcut is to be used to lock the workstation.
· Click the icon you want to use, and then click OK. Click OK again.
· Double-click the shortcut, and note that the workstation automatically locks
itself.
The user must press Ctrl+Alt+Del, and then type his or her credentials to unlock the
workstation.