locked
Ctr+Alt+Del question on login RRS feed

  • Question

  • Good Afternoon,

    I am not sure where this question belongs as it touches a few groups.

    We have a domain running windows 2008R2 RTC and have a mix of Win7 and XP systems.  I have a user that is on XP, he has a issue with his hands so it is difficult for him to press the Ctrl+alt+del keys at once to get to the login screen.  We are a small company and I try my best to keep security locked down but at times there needs to be compromises.

    I found an article that explains how to go into the control panel and under administrative tools local security policy you can change the security options for interactive logon: Do not require Ctrl+Alt+Del from disabled (or in our case not defined) to enabled

    This should allow him to just login without pressing all the keys.

    My question is the following

    1: What are the security risks really in this?

    2: would default domain group policy override this setting?  So when he turns on the system again the next day it will be back to the way it was.

    Thanks

    Adam Raff

    Friday, January 27, 2012 4:38 PM

All replies

  • Good Afternoon,

    I am not sure where this question belongs as it touches a few groups.

    We have a domain running windows 2008R2 RTC and have a mix of Win7 and XP systems.  I have a user that is on XP, he has a issue with his hands so it is difficult for him to press the Ctrl+alt+del keys at once to get to the login screen.  We are a small company and I try my best to keep security locked down but at times there needs to be compromises.

    I found an article that explains how to go into the control panel and under administrative tools local security policy you can change the security options for interactive logon: Do not require Ctrl+Alt+Del from disabled (or in our case not defined) to enabled

    This should allow him to just login without pressing all the keys.

    My question is the following

    1: What are the security risks really in this?

    2: would default domain group policy override this setting?  So when he turns on the system again the next day it will be back to the way it was.

    Thanks

    Adam Raff


    I would imagine that Group Policy would either not allow you to change it or if you did it would supercede it. I would suggest putting him in another group that doesnt have the policy in place instead. As for the security risks...i have yet to fully understand why classic logon is more secure than the gui interface. Perhaps it adds an extra key press that would exsist normally?

    Correcting myself. If you didnt define it under group policy i do beleive that you can set it locally.

    • Proposed as answer by Dogboy1 Friday, January 27, 2012 4:47 PM
    • Unproposed as answer by Dogboy1 Friday, January 27, 2012 4:51 PM
    • Edited by Dogboy1 Friday, January 27, 2012 4:52 PM
    Friday, January 27, 2012 4:47 PM