we had an ask from mgnmt stating is there a way we can lock the screen for the user and have several apps install (upgrade). I've seen some blogs regarding using a TS and implementing certain regkeys to not allow a user to login while apps update, then at the end of the TS it removes those keys but wanted to see if there is possibly another solution that does the same? We do understand we can state what processes to close under the application packages, but we were looking for a lock user out during apps install solution
You could use pre-scripts and post-scripts to set the registry values to lock a device usage, run command to lock the screen, then remove the registry values. Could be applied on a per-app basis.
You could also reference updates of ConfigMgr apps generated by Patch My PC within a task sequence. If you have found instructions on how to proceed with a TS, then that could be an avenue to explore.