They keep multiple workflows from running at the same time and serialize them. When you hit a lock activity (with a specific ID number) it prevents any others from going past that point (with the same ID) until the running workflow unlocks that ID. Kreg does a good job of explaining it in Episode 38 of TechNow. I invite you to watch.
