Even though Users are supposed to be able to change their lock screen, many times, even though the red warning that says to change in Group Policy to allow it is missing, they still can't. Rather than attempt to change in Group Policy (it usually already shows "allowed") or make a Registry Change, merely give the User temporary Admin status, make the change and then revert the User to a regular account.