Can all TLDs be locked?
Currently, only COM, NET and ORG TLDs can be locked. This is because other TLDs require auth codes to transfer names, and the auth codes must be provided by us. ORG domain names also require an auth code, but this is relatively new and therefore we retained the ability to lock ORG domain names when we modified our systems to add auth codes for ORG domains.