We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now


Preventing the Ctrl+Alt+Del keyboard event

BomBer asked
Medium Priority
Last Modified: 2013-12-25

I working on an automated install account and wish to prevent user interaction during this process.  

What I have setup is a login script that calls a VB app, this VB app then uses the wshshell.run "install.bat",2,True to call another batch file and hold focus until that batch file has completed.  The VB app also uses the BlockInput API to prevent user interaction, however in the event that the user presses Ctrl+Alt+del the blockinput return to false.  Adding to this, these are users within a domain and when they press Ctrl+Alt+Del a security box appears and stops running apps from responding to this event.  So what I thought was to change the keyboard mapping during this process therefore preventing the event ever occuring, I haven't had much luck with this approach.  So someone told me on another forum that maybe I could run my app as a service and this maybe able to respond to the event.  I have never developed a service so this approach will probably take some time to develope and may not work anyway.

Does anyone have any ideas?

Watch Question

High School Computer Science, Computer Applications, Digital Design, and Mathematics Teacher
Top Expert 2009
The Ctrl-Alt-Del combination is a "secure attention sequence" (SAS) and cannot be prevented on the newer Windows operating systems (NT, 2000, XP) without completely replacing Gina.Dll.

See here for an overview of replacing GINA (Graphical Identification and Authentication):

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


Replacing this DLL seems like a bit of a risk, therefore I am not willing to take up this approach.  From searching around I have found the site: http://www.microsoft.com/whdc/device/input/w2kscan-map.mspx  This seems like a workable approach as I could change the mappings of a machine and reboot to have them take effect.  Autologon an account to install the software, remove the mapping/autologin and reboot the machine.  However I have to do this for NT machines as well and this approach will only work on 2000+.  Any one got any ideas?

Not sure if this may help,  its a question similar to one I asked some time ago.



This looks doable, I shall have a play in the week.

Autologon - I have never created a situation where this was needed, looks like I will in this case.  I have a few leads on sorting an autologin function, but I see you have used this approach.  So teaching me is a possibility ;)



Thanks for your suggestion but unforunately the "Disable" section of that post doesn't work.  Shame it's exactly what I'm after.
Mike TomlinsonHigh School Computer Science, Computer Applications, Digital Design, and Mathematics Teacher
Top Expert 2009

Nice find EDDYKT.

I verified it works on my WinXP Pro system...got the "Task Manager has been disabled by your administratory" message when I hit Ctrl-Alt-Del.

Though I haven't tried to set this policy at run-time via registry changes yet...
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.