why afw tray icon status is locked?
The lock icon indicates that the service account setting is not correct (account not available, password wrong, computer is not properly on domain after drive imaging, etc.)
Whenever you restore an image of a computer that (was) member of a domain at the time of the backup you may run into problems with the Secure Channel and or Machine Password which has an expiry date of 30 days. The last known password is also kept extending the period to 60 days.
After expiry; the Secure Channel and/or Machine Password must be reset. One "easy" method is leaving and rejoining the domain. Do also use Google...
After the reset, apply the 800xA System Software User Settings again and attempt to open a workplace, etc.