WinSecWiki > Security Settings > Local Policies > Security Options > Interactive Logon > Do not require CTRL+ALT+DEL

Interactive logon: Do not require CTRL+ALT+DEL

Normally Windows requires you to press CTRL-ALT-DEL before allowing you to enter your logon credentials. The reason for this is to ensure that it’s really the operating system to whom you are giving your credentials and not an imposter program. This key sequence triggers a low level hook that transfers control of the interface to the Windows logon function. There are controls in place to prevent other programs from intercepting this key sequence.

If you enable this setting, Windows displays the logon dialog and accepts credentials without first requiring CTRL-ALT-DEL.

Note: Like all “Interactive logon:” policies, this policy is a workstation level policy. This policy needs to be defined in a GPO that gets applied to workstations such as Default Domain Policy. If you only configure this policy on the domain controllers, such as with Default Domain Controllers Policy, you will only impact users logging on at the console of the domain controller. You should also configure this policy on Terminal Servers accessible to end-users. 

Back to top


Additional Resources