Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 411
  • Last Modified:

Preventing the Ctrl+Alt+Del keyboard event

Hi,

I working on an automated install account and wish to prevent user interaction during this process.  

What I have setup is a login script that calls a VB app, this VB app then uses the wshshell.run "install.bat",2,True to call another batch file and hold focus until that batch file has completed.  The VB app also uses the BlockInput API to prevent user interaction, however in the event that the user presses Ctrl+Alt+del the blockinput return to false.  Adding to this, these are users within a domain and when they press Ctrl+Alt+Del a security box appears and stops running apps from responding to this event.  So what I thought was to change the keyboard mapping during this process therefore preventing the event ever occuring, I haven't had much luck with this approach.  So someone told me on another forum that maybe I could run my app as a service and this maybe able to respond to the event.  I have never developed a service so this approach will probably take some time to develope and may not work anyway.

Does anyone have any ideas?

Thanks
0
BomBer
Asked:
BomBer
  • 3
  • 2
  • 2
  • +1
2 Solutions
 
Mike TomlinsonMiddle School Assistant TeacherCommented:
The Ctrl-Alt-Del combination is a "secure attention sequence" (SAS) and cannot be prevented on the newer Windows operating systems (NT, 2000, XP) without completely replacing Gina.Dll.

See here for an overview of replacing GINA (Graphical Identification and Authentication):
http://msdn.microsoft.com/msdnmag/issues/05/05/SecurityBriefs/
0
 
BomBerAuthor Commented:
Replacing this DLL seems like a bit of a risk, therefore I am not willing to take up this approach.  From searching around I have found the site: http://www.microsoft.com/whdc/device/input/w2kscan-map.mspx  This seems like a workable approach as I could change the mappings of a machine and reboot to have them take effect.  Autologon an account to install the software, remove the mapping/autologin and reboot the machine.  However I have to do this for NT machines as well and this approach will only work on 2000+.  Any one got any ideas?

Thanks
0
 
samstarkeyCommented:
Not sure if this may help,  its a question similar to one I asked some time ago.

http://www.experts-exchange.com/Programming/Programming_Languages/Visual_Basic/Q_21196554.html

0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
BomBerAuthor Commented:
This looks doable, I shall have a play in the week.

Autologon - I have never created a situation where this was needed, looks like I will in this case.  I have a few leads on sorting an autologin function, but I see you have used this approach.  So teaching me is a possibility ;)
0
 
BomBerAuthor Commented:
Samstarkey,

Thanks for your suggestion but unforunately the "Disable" section of that post doesn't work.  Shame it's exactly what I'm after.
0
 
Mike TomlinsonMiddle School Assistant TeacherCommented:
Nice find EDDYKT.

I verified it works on my WinXP Pro system...got the "Task Manager has been disabled by your administratory" message when I hit Ctrl-Alt-Del.

Though I haven't tried to set this policy at run-time via registry changes yet...
0
 
EDDYKTCommented:
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now