Configure Dynamic Lock

This setting determines whether dynamic lock is enabled or disabled.

If you enable this setting, Windows will enable dynamic lock for all users on managed devices and users will not be allowed to disable dynamic lock on their accounts.

If you disable this setting, Windows will disable dynamic lock for all users on managed devices and users will not be allowed to enable dynamic lock on their accounts.

If you do not configure this setting, Windows will allow users to enable or disable dynamic lock on their accounts.

Dynamic lock is enabled by default for accounts on unmanaged devices and managed devices where this setting is not configured.

Supported on: At least Windows Server 2016, Windows 10 Version 1703

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\System
Value NameDynamicLock
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

naauth.admx

Administrative Templates (Computers)

Administrative Templates (Users)