Title says it all.
explorer isn't running so I can't grab the lock command from the start menu.
shutdown.exe doesn't seem to have any suitable option for it (shutdown -l is log off).
Windows-L would work on the local machine but gets grabbed by the local machine before it gets a chance to flow down RDP to the remote machine.
Should have a tag windows-core but it doesn't exist.