System hacks: selectively hide Ctrl + Alt + Del security options

We know that in Windows 10 environment, the Ctrl+Alt+Del key combination allows you to launch system security login options including Change Password, Lock Computer, Task Manager, Switch User, Logout, etc. So, what to do if you wish to hide one or several of these options for security or other reasons?

In the earlier Windows XP system, pressing Ctrl+Alt+Del key combination opened the Windows Task Manager. Since Windows Vista, pressing the Ctrl+Alt+Del key combination opens a secure login screen with multiple options, and the key combination to open the Task Manager has changed to Ctrl+Shift+Esc. The method in this article works for both Windows 7, Windows 8, Windows 8.1 and The method in this article also applies to Windows 7, Windows 8, Windows 8.1 and Windows 10.

1. Customize security logon items with Group Policy

If you are using Windows 10 Professional or higher, you can easily modify and customize the Ctrl+Alt+Del launch screen options through Group Policy so that only the options you need appear on the Secure Sign-On screen.

First, press the Win+R key combination to launch the “Run” dialog box. In the Open text box, type GPEDIT.MSC and click the OK button to start the Local Group Policy Editor (Figure 1).

1905A-AQXX-1

In the navigation bar on the left side of the Local Group Policy Editor window, expand “User Configuration → Administrative Templates → System” in order, then you can see the first item is “Ctrl+Alt+Del Options”. After clicking this item, you can see four options in the right pane, respectively: remove “Change Password”, remove “Lock Computer”, remove “Task Manager”, remove “Logout”, etc. (Figure 2). If you have multiple users logged in, you will also see the option to remove “Switch Users”.

1905A-AQXX-2

To remove one or more of the above options, double-click on them, as here we double-click on the “Remove Locked Computer” option, then select the “Enabled” option in the configuration window that opens, click on the “Apply” and “OK” buttons, so that the selected item will no longer appear in the selection window launched by the Ctrl+Alt+Del key combination (Figure 3).

1905A-AQXX-3

If you want to disable the Task Manager from being displayed in the Secure Login window, simply double-click the Remove Task Manager item and set it to Enabled (Figure 4). Do the same for other items.

1905A-AQXX-4

2. Customize the login entry through the registry editor

Not all users can easily control the options of Ctrl+Alt+Del window using the above method. For Windows 10 users who are using Home Edition, they can only use Edit Group Registry to achieve the above modification because the use of Group Policy Editor is restricted in Home Edition.

Tip: To prevent accidents, please make a backup of the registry before modifying it.

After pressing the Win+R key combination, type REGEDIT in the “Run” box and enter to start the Registry Editor. In the Registry Editor, locate “HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem” in order (Figure 5).

1905A-AQXX-5

In the right pane of the System branch, double-click the “Default” name, and in the pop-up “Edit String” dialog box, set the “Value Data” to 1, and then OK (Figure 6).

1905A-AQXX-6

To disable the above option, proceed in the right pane.

To disable the lock screen, right-click on a new DWORD (32-bit) value called DisableLockWorkstation, then double-click on it, set its value to 1, and click the OK button (Figure 7).

1905A-AQXX-7

Similarly, to disable password changes, create a new DWORD (32-bit) value called DisableChangePassword and change its numeric data to 1 (Figure 8).

1905A-AQXX-8

Similarly, to disable “Switching Users”, simply create a DWORD (32-bit) value called HideFastUserSwitching and set its numeric data to 1; to disable “Logoff”, simply create a DWORD (32-bit) value called NoLogoff and set its numeric data to 1. To disable Logoff, just create a DWORD (32-bit) value called NoLogoff and set its numeric data to 1. To disable the Task Manager option in the Secure Login menu, just create a DWORD (32-bit) value called DisableTaskMgr and set its numeric data to to 1.

Tip: If the above item already exists, just double-click it to modify the value data.

Leave a Comment