Remove ctrl alt del at logon

[TechSupp]

Is it possible to have our w7 pc's when they start up or are logged off to go straight to the screen asking for login details rather than having the pupils to press ctrl alt del to get to it? Is there an option to do it via gpo?

[6Foot2]

There is a Group Policy setting for this:

 

http://snag.gy/IgsX3.jpg

[Michael]

Yes, just set it on the Default Domain Policy. I wouldn't normally touch it, but it's a common setting I enable for Primary schools as Ctrl+alt+del doesn't add anything to the user experience.

[chazzy2501]

if you did this you'd loose the domain message text as well?

[SYNACK]

Yes, just set it on the Default Domain Policy. I wouldn't normally touch it, but it's a common setting I enable for Primary schools as Ctrl+alt+del doesn't add anything to the user experience.

 

Nothing to the user experience but some to the security experience. Ctrl+alt+del is one of the only key combinations that can't be emulated in software so it is used to make sure that it is a user initiating a session rather than a bit of dodgey software which used to be quite a problem. Not aware of many exploites that target this now thanks to the large amount that use Ctrl+alt+del but our primary age kids seem to manage with it on alright anyway.

[FN-GM]

if you did this you'd loose the domain message text as well?

 

nope

[Michael]

Most Primary kids do manage it OK, but some of the younger ones don't. Being able to remember a username and password is a challenge for a lot of young kids. I'm not aware of any security issues disabling it, but worse case scenario, it can be re-enabled easily enough.

[SYNACK]

For the really young kids the teachers use gold stars on the three keys. They then get told to just hold down all three stars at once, nice and easy, even for the five year olds which are logged in under a class account by the teacher usually anyway.

[Steve21]

I'm not aware of any security issues disabling it, but worse case scenario, it can be re-enabled easily enough.

 

Only thing really is as someone mentioned above, it lets potential bots etc try to login, "however" if you have those bots on the computers being allowed to run etc etc, I'd argue the ctrl-alt-del page is the least of your worries hehe

 

Steve