I had a simple question about Windows 7 Enterprise. I am a computer technician in a corporation serviceing 7000+ PC's. In the past (on Windows XP Professional) when a user would lock the computer we as administrators could unlock the computer and force the log off of the user. Can this feature or one similar be applied In Windows 7 Enterprise if Fast User switching is turned off?

Hi, Yes, there is significant changes to user switch comparing Windows XP & Vista or 7. Windows 7 & Vista offers mutli login for users within domain and to log off any user: you have to login to a computer using administrator account - open task manger - users tab - from the panel you will get access to manage log in users. BartBart Kurowski IT Support Analyst, MCP, MCTS, MCITP, MCAS

Hi, Yes, there is significant changes to user switch comparing Windows XP & Vista or 7. Windows 7 & Vista offers mutli login for users within domain and to log off any user: you have to login to a computer using administrator account - open task manger - users tab - from the panel you will get access to manage log in users. BartBart Kurowski IT Support Analyst, MCP, MCTS, MCITP, MCAS

Yes, but how do you log in to the already locked PC when the boss has deemed the snazzy new "fast user switching" and RDP verboten? Is there no way to unlock a locked desktop short of cutting power??

I too have this same question... In our environment we have "fast user switching" disabled and our workstations set to lock after 15 minutes (for security)... On Win7 workstations that are shared by multiple employees, the previous user forgets to log off when they walk away, and the next user is unable to login. The only options we currently have is to hold the power button in to shut down the workstation... We need to be able to unlock (force logoff) a workstation, like we did with Windows XP... Anybody got any ideas on how to do this with "fast user switching" disabled? Thanks, Justin

I am having the same issue and as yet am unable to find a solution other than resetting the machine as you say... which is obviously not a good thing. There must be a way to do this as this must be occurring all over the place. If I find something I'll post it up.. Cheers

I developed a possible solution to this problem which at the moment is undergoing MS Review. I'll keep you updated on the progress. I already tested it in our infrastructure and it works.

Hi, i'm in need of this too. Windows 7 Pro, domain joined with fast user switching disabled. If you need anymore testers for your solution i'd be happy to volunteer.

with a client desktop locked-what do you get with a Alt+W?

with a client desktop locked-what do you get with a Alt+W? On Windows 7 Enterprise x64, [Alt]+[W] does nothing at: - the "press Ctrl+Alt+Del to unlock" screen, - the "enter current user password" screen, or - on the "other credentials" screen (only viewable on laptops with smart card readers) What did you think [Alt]+[W] would do? Justin

Any word on the solution yet?

Yes, we're making progress with the review process. Currently, the solution is being reviewed by the Design and Product group teams. My hope is that they are going to "officialize" the solution and make a hotfix/patch/feature pack using the same technologies themselves. This way, every admin around the world could use the solution and be sure to use Microsoft sanctioned code. If this process "fails" and all i get is "it's ok to do it this way, but we won't officially embrace it" or something along these lines, i'll upload it somewhere myself (including source of course). But until then, i'll keep it to myself.

I have an OK from Microsoft that the proposed solution is within "Windows" design boundaries. I uploaded the compiled x86 and x64 binaries to http://www.filefactory.com/file/ccb8b53/n/AdministrativeUnlock.zip. Batch Files for easy (de)installation is included. Just use "Run as Administrator" with the Batch file for your platform, the lock the machine. When trying to unlock, you should have a "Other Credentials" Button. Click it, select "Administrative Unlock", then enter username and password of a user which is in the local Administrator Group. Please provide feedback here, there's no other place i could use.

Please use your skydrive public folder- what the #@#@^$% is that link?

Ok, made a skydrive profile and shared a folder with the public. you should be able to get it there - http://cid-9363831414c526a5.office.live.com/self.aspx/Public/AdministrativeUnlock.zip

Works great thanks.

Oliver, do you have a similar solution for Windows 7 Professional? I tried the solution you created for Enterprise on a W7 Pro box with no success.

What kind of problem are you experiencing? For Installation, make sure you choose the batch-file for the right architecture (x86 / x64) and also make sure to start the batch file by Right-Clicking it and then selecting "Run as Administrator...". Even if you are logged in as local admin, you have to start it that way or it won't work. To my knowledge, there should be no difference between Win7 Enterprise and Win7 Professional regarding this solution (using a custom Credential Provider), so i think you're doing something wrong along the way.

Thanks Oliver F!! I have been looking for a solution on this myself. I'll give it a shot tomorrow. Although, I got a couple questions though. First is when you refer to "start the batch file" are you referring to "Install_x86.cmd" (for a 32bit Windows 7 Prof machine)? The other question is when you say Microsoft has given you an OK, does this mean that Microsoft will "make a hotfix/patch/feature pack using the same technologies themselves"? Again, Thanks for the help!!

That is correct, i'm talking about the two Install-Batch Files, which would be "Install_x86" for a 32-Bit Windows 7 Machine. The decision whether Microsoft will do something themselves or not is still up in the sky, but they gave me the "OK" to use it because in their review there was nothing to complain about (regarding the program code and the use of API calls, which could've gone against the basic design guidelines but did not).

Just put it on my Windows 7 Professional machine and it worked great!! The only thing I found was I needed to use the local administrator account for the computer for it to work. The domain administrator account didn't work. Great solution though!! Thanks again Oliver F!!

Just put it on my Windows 7 Professional machine and it worked great!! The only thing I found was I needed to use the local administrator account for the computer for it to work. The domain administrator account didn't work. Great solution though!! Thanks again Oliver F!!

Just put it on my Windows 7 Professional machine and it worked great!! The only thing I found was I needed to use the local administrator account for the computer for it to work. The domain administrator account didn't work. Great solution though!! Thanks again Oliver F!!

You need to use an account that is a member of the machine's local "Administrators" group. Whether that is a domain user or local user is irrelevant.

You need to use an account that is a member of the machine's local "Administrators" group. Whether that is a domain user or local user is irrelevant.

You need to use an account that is a member of the machine's local "Administrators" group. Whether that is a domain user or local user is irrelevant.

Thanks!!!! We have been looking for a solution since the Win7-release in june 2009. This DLL-fix works fine, and easy to install/deploy to our computers... Great work!

Ok, made a skydrive profile and shared a folder with the public. you should be able to get it there - http://cid-9363831414c526a5.office.live.com/self.aspx/Public/AdministrativeUnlock.zip Works great. Thanks for the sulution / Magnus

At this point is the unofficial download the only option that's going to be available, or will it eventually be rolled into a hotfix from ms?