The windowstation can be locked by calling the function LockWindowStation. This function notifies the logon thread via event that the windowstation is locked. The logon thread causes the actual lock to occur by calling LogonLockWindowStation. The user then has to use the SAS to request that the windowstation be unlocked. The logon thread collects and verifies the user and password before the windowstation is unlocked.