Concerning to Kaspersky Administration Kit 6.0 MP1
"Lock" is a button in the settings of the Antivirus, Network Agent and Administration Server policies. By default the "lock" is unlocked and looks the following - 
.
The “locked” policy parameters are also named mandatory. To close the “lock”, click the “lock” button. Once the button is locked it changes to 
. The “lock” changes the settings only in the selected group of settings.
The “locked” settings:
- are applied on client computers and Servers for which the policy is enforced;
- cannot be changed:
- in local anti-virus settings
- in tasks
- in policies of nested groups
- in policies and tasks on slave Servers
You can define whether mandatory (“locked”) and optional settings should be applied or not. You can do it in a policy on the Enforcement tab.
