Windows Dynamic Lock Bluetooth Registry Path

Windows Dynamic Lock uses Bluetooth Received Signal Strength Indication (RSSI) to detect when a paired device moves away from a PC and automatically locks the operating system. This article details the specific Windows Registry path used to control Dynamic Lock parameters, signal strength thresholds, and plugin behaviors.

Dynamic Lock Registry Locations

The primary configuration and behavior of Dynamic Lock, including its Bluetooth signal measurement and plugin definitions, are controlled through the following paths in regedit:

1. System and Plugin Configuration Path:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Under this path, Windows registers the Dynamic Lock authentication and proximity providers. The Dynamic Lock subsystem reads configuration data here to manage the default Bluetooth proximity plugin.

2. Policy and Threshold Management Path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DynamicLock

When configured via Group Policy or Mobile Device Management (MDM / Intune CSP), this policy key enforces Dynamic Lock settings across the system.

3. User-Level State Path:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\DynamicLock

This path manages the enabled/disabled state and pairing metadata for the current user’s profile.

Configurable Dynamic Lock Values

When configuring Dynamic Lock rules or policy rules via MDM/CSP (which translate to the registry policies), the following settings dictate proximity behavior:

• Plugins (XML Rule): A structured XML string defining the Bluetooth provider, paired device hardware ID, and the RSSI attenuation threshold (e.g., -10 dBm).
• Enable (DWORD): Set to 1 to enable Dynamic Lock, or 0 to disable it.
• WaitToLock (DWORD): Defines the timeout period (in seconds) that Windows waits after the Bluetooth signal drops below the threshold before locking the workstation.

How to Modify the Threshold via Registry

1. Press Win + R, type regedit, and press Enter.

2. Navigate to:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DynamicLock

   (If the DynamicLock key does not exist, right-click on Windows -> New -> Key, and name it DynamicLock.)

3. Create or modify the configuration string value to adjust signal measurement rules and timeout delays according to your environment.

4. Restart the PC or restart the Winlogon process for the changes to take effect.