Privacy and Security Enable or Disable Ctrl+Alt+Delete Secure Sign-in on Lock Screen in Windows 11


Lock_Screen_banner.png

This tutorial will show you how to enable or disable secure sign-in to require users to press Ctrl + Alt + Delete on the lock screen before signing in to Windows 11.

The lock screen (aka: welcome screen) is the screen you see at startup and when you lock (Win+L) the PC. You will need to dismiss the lock screen to to see the sign-in screen and sign in to Windows.

For added security, you can enable secure sign-in to require users to press Ctrl + Alt + Delete on the lock screen before signing in. This guarantees that the authentic Windows sign-in screen appears, protecting the system from programs that mimic a sign-in to retrieve password info.

Reference:
learn.microsoft.com

Interactive logon Do not require CTRL+ALT+DEL - Windows 10

Describes the best practices, location, values, and security considerations for the Interactive logon Do not require CTRL+ALT+DEL security policy setting.
learn.microsoft.com


You must be signed in as an administrator to enable or disable secure sign-in.



Contents

  • Option One: Enable or Disable Secure Sign-in in netplwiz
  • Option Two: Enable or Disable Secure Sign-in in Local Security Policy
  • Option Three: Enable or Disable Secure Sign-in using REG file


EXAMPLE: Secure sign-in "Press Ctrl+Alt+Delete to unlock" on lock screen

Press_Ctrl+Alt+Delete_to_unlock.jpg





Option One

Enable or Disable Secure Sign-in in netplwiz


1 Open netplwiz.

2 Click/tap on the Advanced tab. (see screenshot below)

3 Check (enable) or uncheck (disable) Require users to press Ctrl+Alt+Delete under Secure sign-in for what you want.

4 Click/tap on OK.

secure_sign-in_netplwiz.png





Option Two

Enable or Disable Secure Sign-in in Local Security Policy


Local Security Policy is only available in the Windows 11 Pro, Enterprise, and Education editions.

All editions can use Option Three to set the same policy.


1 Open Local Security Policy (secpol.msc).

2 Expand open Local Policies in the left pane, and click/tap on Security Options. (see screenshot below)

secure_sign-in_secpol-1.png

3 In the right pane of Security Options, double click/tap on the Interactive Logon: Do not required CTRL+ALT+DEL policy to open its properties. (see screenshot above)

4 Select (dot) Enabled (disable secure sign-in) or Disabled (enable secure sign-in) for what you want, and click/tap on OK. (see screenshot below)

secure_sign-in_secpol-2.png

5 You can now close Local Security Policy if you like.




Option Three

Enable or Disable Secure Sign-in using REG file


1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.

2 To Enable Secure Sign-in

A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Enable_lock_screen_Ctrl+Alt+Del_Secure_sign-in_for_all_users.reg​


(Contents of REG file for reference)
Code: 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=dword:00000000

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=-

3 To Disable Secure Sign-in

This is the default setting.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Disable_lock_screen_Ctrl+Alt+Del_Secure_sign-in_for_all_users.reg​


(Contents of REG file for reference)
Code: 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=dword:00000001

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"DisableCAD"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCAD"=-

4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You could now delete the downloaded .reg file if you like.


That's it,
Shawn Brink


Related Tutorials

 

Attachments

Last edited:
Click to expand...
Hi,
I enabled this only with 1 registry key in Windows 11 and it works

HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
name = 'DisableCAD'
value = '0'

reference:
learn.microsoft.com

Interactive logon Do not require CTRL+ALT+DEL - Windows 10

Describes the best practices, location, values, and security considerations for the Interactive logon Do not require CTRL+ALT+DEL security policy setting.
learn.microsoft.com
 

My Computer

System One

  • OS
    Windows 11
crypticlulu said:
Hi,
I enabled this only with 1 registry key in Windows 11 and it works

HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
name = 'DisableCAD'
value = '0'
Click to expand...

Hello, :-)

That does indeed work when only using the Security Policy in option 2.

The REG files in option 3 include the registry changes made by both options 1 and 2 to cover all possibilities. Gotta love all the different ways to set it.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
You must log in or register to reply here.

Similar Windows 11 Tutorials

  • Article Article
Accounts Enable or Disable Enhanced Sign-in Security in Windows 11
Replies
0
Views
4K
Brink
Brink
  • Article Article
Network and Internet Enable or Disable Thumbnail Previews on Network Files and Folders in File Explorer in Windows 11
Replies
0
Views
1K
Brink
Brink
  • Featured
  • Article Article
Apps Enable or Disable Recall Feature in Windows 11
Replies
2
Views
2K
Brink
Brink
  • Article Article
Privacy and Security Enable or Disable System Guard Secure Launch for Firmware Protection in Windows 11
Replies
2
Views
4K
Brink
Brink
  • Article Article
Privacy and Security Enable or Disable Help Improve Recall Snapshots Filtering in Windows 11
Replies
0
Views
330
Brink
Brink
  • Article Article
Privacy and Security Enable or Disable Block All Incoming Connections in Windows Firewall
Replies
0
Views
806
Brink
Brink
  • Article Article
Accounts Enable or Disable Administrator Protection for Admin Approval Mode in Windows 11
Replies
13
Views
5K
dacrone
dacrone

Latest Support Threads

Latest Tutorials

Back
Top Bottom