[ironi]

i had a thought but i'm not sure how to implement it. the device lock can be engaged by assigning it to the end key or through several other means. that's the same device lock program that runs when you set a password, only when you don't assign a password and just engage it with a key, it works password-free. the problem we run into is that to get that same device lock program to run on startup we have to go through the lock application which asks us to set a password. if there was any way (perhaps through the registry) to fool the system into thinking that we went through the lock program but did not set a password, the lock should engage. maybe there's some stupid key there somewhere that has a value like "lock on wake = 1". someone with a bigger brain than i, help me out here.