Today, we are discussing on a new topic called Show or Hide Lock Option in User Tile Menu on Windows using Intune Policy. As you all know, that Setting catalog providing different kind of policy settings in those settings Experience category is one of the important one. With this Category, you can enable or disable show lock on user tile Policy.
In the Experience category you may get 27 setting in those settings this is one of the crucial setting. If this policy setting is enabled, the Lock option will always be visible in the User Tile menu. This ensures that users have easy access to lock their devices when it needed. It is especially useful in environments that need a strong security, such as corporate offices.
If this setting is turned off, the Lock option won’t show up in the user menu. That means users won’t be able to lock their screen from there. This can be useful for the devices that are used for many users. If you do not configure this policy setting, users will be able to choose whether they want lock to show through the Power Options Control Panel.
In secure places, it’s a good idea to keep the Lock option so users can protect their information. But in public or shared computers, it’s better to hide it to make things easier and avoid issues. So in this post let’s look how thois policy Enable or Disabled.
Table of Contents
What Does the Show or Hide Lock Policy Control?
It controls whether the Lock option appears in the User Tile menu. If enabled, it’s shown; if disabled, it’s hidden; if not configured, users can choose via the Power Options Control Panel.
How to Configure Show Lock on User Tile – Windows CSP Details
This policy allows you to manage whether Non-Admin User Installation. By reviewing the CSP (Configuration Service Provider) details, you can correctly configure the policy on supported devices. Refer to the screenshot for information on the applicable operating systems, scope, and editions.
Note: You must perform your due diligence before implementing these policies, as at this time they are applicable only to Windows 10.
| Property name | Property value |
|---|---|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 1 |
- Easy Guide to Deploy Azure VPN Client Microsoft Store App using Intune
- How to Allow or Block Option to Show Network using Intune Policy
- How to Pause Intune Config Refresh Feature on Windows Device using Microsoft Graph API
You can easily allow or block the Show Lock on User Tile policy on Windows devices using Microsoft Intune or configure a custom OMA-URI setting. Below is a step-by-step guide to help you do that.
- Sign in to Microsoft Intune
- Go to Devices > Configuration
- Click Create and then new policy
- Choose the platform as Windows 10 and later
- For Profile type, select Templates and then choose Custom
- Provide a Name – e.g. “Show Lock on User Tile.”
- Add a Description if needed
- Click on + Add under OMA-URI Settings to configure the specific setting.
- To Configure the OMA-URI Setting, do the following
- Enter a name for this setting, such as Show Lock on User Tile.
- Briefly describe the setting, e.g., “Enable, Disable Show Lock on User Tile.”
- Enter the following OMA-URI path
- ./Device/Vendor/MSFT/Policy/Config/Experience/ShowLockOnUserTile
- Set the Data type to Integer.
- Enter the value
- 1 to enable the administrator account.
- 0 to disable the administrator account.
- After entering the above details, click Save.
Create a Profile for Show Lock on User Tile
You can start the policy creation of the Show Lock on User Tile in Intune. Using simple steps, you can easily complete the policy creation. Open the Intune admin center. Go to Devices > Configuration > Policies> + Create > + New policy.
How to Fill Basic Details
After creating profile, your next step is to add the basic details. These usually include the name, description, platform information. In the Platform section, you don’t need to make any changes, as it is already set to Windows by default. You should give the policy name, so it’s easy to identify later. You can also add a description to help you understand the purpose of the policy in the future.
- I add the name as : Show Lock On User Tile
- Description : Enable, Disabl,e Show Lock On User Tile
Configuration Settings in Intune
The configuration tab allows you to select specific policy settings to manage your organisation’s devices. On this page, we click on the + Add Settings hyperlink. Then you will get a settings picker that will show different types of categories to select specific settings. Here, I choose to Experience category and select the Show Lock on User Tile settings.
Enable the Show Lock on User Tile Policy
If you want to enable this policy, look for the toggle switch next to the Show Lock on User Tile. By default, this toggle is set to Enabled. If you want to continue with that Click next to continue with the procedure.
Disable Show Lock on User Tile Policy
If you want to Disable this policy, look for the toggle switch next to the setting. By default, this toggle is set to Enabled. To enable the policy, you have to move the toggle from Right to left. Once you do that, the toggle will turn off in grey color, and you will see it change to Disabled.
Scope Tags for Intune Policy
The next section is the Scope tag and which is not a mandatory step. It helps to assign this policy to a defined group of users or devices. Here, I skip the section and click on the next button.
How to Add Groups
The assignments tab is the crucial step that means which groups can be selected to assign the policy. Click on the +Add groups option under included groups. Select the group from the list of groups on your tenant. Click on the Select button. And you can see the selected group on the Assignments tab. Click on the Next button in the window below.
Review + Create
Review + Create is the final step in policy creation. In this step, you can view the basic details and configuration settings. If you want to make any changes, you can easily go back to the previous tabs to edit them.
Monitoring Status
After the policy was created successfully. To check this, you can either wait for up to 8 hours for the policy to apply automatically, or you can reduce the waiting time by manually syncing the policy through the Company Portal.
- After syncing, you can check the policy’s status through the Intune Portal.
- To do this, go to Devices > Configuration Profiles.
- In the Configuration policy section, search for the name of the policy you created.
- I named the policy as Show Lock on User Tile.
- So, I searched that name and, clicked on it, and then I get the status below.
Client Side Verification
To confirm the policy is successful or not, you can use the Event Viewer. First, open Event Viewer and navigate to Applications and Services Logs > Microsoft > Windows > Device Management > Enterprise Diagnostic Provider > Admin. Look for Event IDs 813 or 814, as these typically contain policy-related information.
- “Filter Current Log” option in the right-hand pane to get the results easily
- In the below screenshot the policy details were found under Event ID 813.
| Policy Details |
|---|
| MDM PolicyManager: Set policy int, Policy: (ShowLockOnUserTile), Area: (Experience), EnrollmentID requesting merqe: (B1E9301C-8666-412A-BA2F-3BF8A55BFA62), Current User. (Device), Int: (0x0), Enrollment Type: (0x6), Scope: (0x0). |
How to Dlete Lock Option in User Tile Menu
If you want to delete a policy, you can do it easily. First, go to the Device Configuration section and search for the policy name. Once you find it, click the 3-dot menu next to it. From there, select the Delete option, and the policy will be permanently removed.
For more information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.
How to Remove Lock Option in User Tile Menu
After creating the policy, if you want to remove the specific group that you previously selected, you can easily do that. First, go to Devices > Configuration policies. In the Configuration policy section, search for the policy name and Once the result appears, click on the policy.
- Scroll down the page, and you will see sections like Basic Details and Assignment Details. In the Assignment section, you will find an Edit option and click on it.
- When you click Edit, you will enter the Assignment page.
- Here, you will see a Remove option next to the group you added earlier.
- Click on Remove, then proceed by clicking Review + Save.
For detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.