Thanks, tw33k!
I used your method and it works.
Out of curiosity, I fired up gpedit.msc and saw screens similar to the ones I'm used to seeing in older versions of Win. Note that the policy is "undefined". I was tempted to modify it in the fashion that will require ctrl-alt-del, but fear stayed my hand

. Comments?
Raargh