Each configuration policy statement follows the form:

and you have the ability to set attributes in the form:

Currently, there is only one policy attribute available: locked. The locked attribute stops a more precise policy from overriding the locked policy and also stops a client from manually overriding that policy.

For example, at some sites it is desirable to set configuration management rules that apply to everyone on the system. This might be the case in a multi-user, networked environment, where you may decide that a strict-locking policy should be in effect for all users.

Removing the “#” symbol from the beginning of the property code enables that property.