Re: Forcing Ctrl+Alt+Del in registry.....DisableCAD



Hey man, thanks a bunch, that LogonType was what i was looking for. I can
manually go into the registry and use that tweak to do what i wanted. Do you
by any chance know the command i would use to put that setting into a .inf
file? I have to include on an unattended install in the future.

I've tried:
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonType=0
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonType="0"
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonType=4,0
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\LogonType=4, "0"

Thanks again for your help,
Ryan G.

"Nepatsfan" wrote:

AADBF792-CDBA-4B21-9631-03C8428539AA@xxxxxxxxxxxxx,
Greeney <Greeney@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I’m having trouble forcing a couple of WXP Pro-loaded
laptops to require a Ctrl+Alt+Del logon. Based on a
knowledge base article I read (Q291559) I modified the
registry to contain the following key:



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\DisableCAD and set the value to
“0”



This did not force the desired effect on any of the three
machines I’ve tried it on.



I then did some further research and found a few articles
telling me to create the same subkey under



HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\



I did this on three machines and still had no luck forcing a
CAD logon. I went and put both of the above keys on all
three machines and still not achieve my goal.



Is this a setting or key elsewhere in the registry that
overrides these keys? All three machines are WXP w/ SP2.
Any insight you can give me would be appreciated.



Respectfully,
Ryan J. Greeney

Keep in mind that in order to require CAD you also need to
disable the Welcome Screen and require the Logon To Windows
Dialog box.

If you have to do this through a registry edit, try the
following,
Change the Login Window
http://www.winguides.com/registry/display.php/972/

Require Users to Press Ctrl+Alt+Delete Before Logon
http://www.winguides.com/registry/display.php/971/

FYI, all of this can be done through the local group policy.
Go to Start -> Run and enter gpedit.msc in the Open box.

Expand the following:
Computer configuration -> Windows Settings -> Security
Settings -> Local Policies -> Security Options
In the right hand pane, look for "Interactive logon: Do not
require CTRL + ALT + DEL".
Right click this policy and set it to Disabled.
Next, navigate to Computer Configuration -> Administrative
Templates -> System -> Logon.
In the right hand pane, right click "Always use classic logon"
and set this policy to Enabled.

You can also disable the Welcome Screen through the Control
Panel -> User Accounts applet.

Requiring CAD to logon can be accomplished by going to Start ->
Run and entering control userpasswords2 in the Open box.
Click OK.
Click the Advanced tab of the User Accounts applet, put a check
mark in the box next to "Require users to press Ctrl + Alt +
Del". Click OK.

Good luck

Nepatsfan






.



Relevant Pages

  • Re: Registry settings management for 16 computers through Group Po
    ... AutoLogonCfg="Configure Automatic user logon" ... This ADM fiel is working fine. ... policy templete. ... the key needs to be located under Approved Registry Key ...
    (microsoft.public.windows.group_policy)
  • ADM templete for autologon
    ... I have created this ADM templete file to be able to configure default user ... logon for collection of PCs: ... policy templete. ... the key needs to be located under Approved Registry Key ...
    (microsoft.public.windows.group_policy)
  • Re: WinXPPro Requires multiple Reboots to get Machine Software Install
    ... so if you haven't upgraded your GPOs with the XP ... do against many machines. ... > logon optimization" ... >>thus before certain policy can be processed. ...
    (microsoft.public.windows.group_policy)
  • Re: Message Text in Group policy still showing after disabling it.
    ... Either go to a machine that is still getting the logon banner ... And do a search in the registry for some unique word in the ... and reenabled the policy but didn't put any text into either box. ... Scott ...
    (microsoft.public.win2000.group_policy)
  • Re: Disable Interactive Logon to a Group of users in an OU
    ... OU) the ability to logon to any machine in the domain. ... I don’t want to put the account in a policy individually, as I want any new account in the OU to automatically have the denied interactive logon to all machines. ... As service user creation shouldn't be a really dynamic thing, you could put them into a security group and create a Group Policy on the domain machines that denies them local logon. ...
    (microsoft.public.windows.group_policy)

Quantcast