Under Win2K you should be able to create a notification package registry key as a subkey of HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify.

In the notify key you should be able to create a rule: lock with the registry values [REG_SZ]. However once I create this I need more information on creating an even handler fuction for this package. Is anyone familiar with this process.

This registry edit should allow the logging/auditing of the locking and unlocking of a system.

However, I need some assistance with completing this task.