disable ctrl-alt-del



zero
07-10-2005, 12:13 AM
Hi everyone,

I'm looking for a way to disable the ctrl-alt-del key combination. I know
this can be done in gpedit.msc. However, I want to do it from within a
program I'm writing. On several websites I saw people suggesting changing
the registry keys DisableCAD or DisableTaskMgr, but this doesn't seem to do
anything.

Any suggestions on how to do this?

zero

Bert Kinney
07-10-2005, 12:13 AM
Hi Zero,

I don't know if this what you are looking for, but you may want to
check it out.
Enable/Disable Task Manager
http://www.dougknox.com/xp/utils/xp_taskmgrenab.htm

--
Regards,
Bert Kinney MS-MVP Shell/User
http://dts-l.org/


zero wrote:
> Hi everyone,
>
> I'm looking for a way to disable the ctrl-alt-del key
> combination. I know this can be done in gpedit.msc.
> However, I want to do it from within a program I'm
> writing. On several websites I saw people suggesting
> changing the registry keys DisableCAD or DisableTaskMgr,
> but this doesn't seem to do anything.
>
> Any suggestions on how to do this?
>
> zero

Jetro
07-10-2005, 12:13 AM
Why does someone sane want to disable CAD?

Doug Knox MS-MVP
07-10-2005, 12:13 AM
To prevent users from opening Task Manager and killing processes. However, that doesn't address the other methods of doing the same thing.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Jetro" <somewhere@internet.space> wrote in message news:%23XBzAY1WFHA.1152@tk2msftngp13.phx.gbl...
> Why does someone sane want to disable CAD?

zero
07-10-2005, 12:13 AM
I'm writing a secure windows shell, that can be used to restrict access to
the computer. For example if you're using a computer as an exhibition tool
you may want people to be able to run only one program. Unless you plan to
stay with the computer the whole time, you need a way to keep people from
starting other programs, shutting down the computer, killing processes,
browsing the hard disk, ...

My shell puts all that stuff behind a password. The system administrator
can then decide what programs the user is allowed to run.

Of course you might argue that creating a whole new windows shell is not
quite sane, but that's a different question completely ;)


"Jetro" <somewhere@internet.space> wrote:

> Why does someone sane want to disable CAD?

Jetro
07-10-2005, 12:13 AM
If the question was/is "How to disable Task Manager" I can only rephrase:
Why does someone sane want to disable Task Manager? :o)

zero
07-10-2005, 12:13 AM
"Bert Kinney" <bert@NSmvps.org> wrote:

> Hi Zero,
>
> I don't know if this what you are looking for, but you may want to
> check it out.
> Enable/Disable Task Manager
> http://www.dougknox.com/xp/utils/xp_taskmgrenab.htm

That is not what I was looking for, but it did help! I had a close look at
that exe file and found where I was going wrong, thanks a lot :-)

zero

Jetro
07-10-2005, 12:13 AM
I won't argue the new shell questions :o) but running a computer in a kiosk
mode doesn't demand much effort.

Doug Knox MS-MVP
07-10-2005, 12:13 AM
I can understand, but the typical use of CTRL-ALT-DEL, short of logging on, is to invoke Task Manager.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Jetro" <somewhere@internet.space> wrote in message news:eoTDQH6WFHA.2796@TK2MSFTNGP09.phx.gbl...
> If the question was/is "How to disable Task Manager" I can only rephrase:
> Why does someone sane want to disable Task Manager? :o)
>

Jetro
07-10-2005, 12:13 AM
I cannot understand the use of CAD to invoke Task Manager :o). I teach
everyone to use CAD as shortcut to Lock Computer option only.

Doug Knox MS-MVP
07-10-2005, 12:13 AM
If you're not in a domain environment, CAD will bring up Task Manager in a default installation. Winkey + L also locks the workstation.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"Jetro" <somewhere@internet.space> wrote in message news:%23PE77X8WFHA.2256@TK2MSFTNGP14.phx.gbl...
>I cannot understand the use of CAD to invoke Task Manager :o). I teach
> everyone to use CAD as shortcut to Lock Computer option only.
>

Jetro
07-10-2005, 12:13 AM
I can see your point, but Win+L works in XP/2003 only. The same is true with
regard CAD, TM, and workgroup environment.

zero
07-10-2005, 12:13 AM
"Jetro" <somewhere@internet.space> wrote:

> I won't argue the new shell questions :o) but running a computer in a
> kiosk mode doesn't demand much effort.
>

How would you go about running a computer in kiosk mode? Isn't there way
too much to take into account? As an example, the place where I used to
work had disabled registry editing. Good idea, except it was possible to
just create a .reg file and import that from the command line. If you
completely replace the shell there is not much anyone can do, no matter how
much they know about computers.

Doug Knox MS-MVP
07-10-2005, 12:13 AM
If all you wanted was Internet Explorer, for example, you would set the Shell value on a per-user basis to run Internet Explorer in kiosk mode:

http://support.microsoft.com/?kbid=154780
How to Use Kiosk Mode in Microsoft Internet Explorer

The Shell value is set/created in:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

You will need to be logged on to that account, when you change the value, or see www.dougknox.com, Win XP Tips, Advanced Registry Editing for a method of doing this while you're logged onto a different account, such as the Administrator.

You would then use TweakUI or CONTROL USERPASSWORDS2 to set the "internet only" account to autologon. Your Administrator account should still be enabled, and accessible via Remote Desktop (XP Pro only).

Additionally, you would want to enable various Internet Explorer restrictions, that prevent access to the file system from the browser and etc.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"zero" <zero@this.hi> wrote in message news:Xns965EAC2E9CC09zerothishi@195.130.132.70...
> "Jetro" <somewhere@internet.space> wrote:
>
>> I won't argue the new shell questions :o) but running a computer in a
>> kiosk mode doesn't demand much effort.
>>
>
> How would you go about running a computer in kiosk mode? Isn't there way
> too much to take into account? As an example, the place where I used to
> work had disabled registry editing. Good idea, except it was possible to
> just create a .reg file and import that from the command line. If you
> completely replace the shell there is not much anyone can do, no matter how
> much they know about computers.

zero
07-10-2005, 12:13 AM
"Doug Knox MS-MVP" <dknox@mvps.org> wrote:

> If all you wanted was Internet Explorer, for example, you would set
> the Shell value on a per-user basis to run Internet Explorer in kiosk
> mode:
>
<trimmed>

So then it does mean changing the shell. I do the same, only I use my own
program instead of internet explorer - which gives me a lot more options.

Doug Knox MS-MVP
07-10-2005, 12:13 AM
Yes, if you put an alternate shell in place you can, very effectively, control what a user can/cannot do. My first effort at kid proofing a computer was to write an alternate shell for Windows 3.1. The kids could run 4 programs and nothing else.

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"zero" <zero@this.hi> wrote in message news:Xns966010CF7972zerothishi@195.130.132.70...
> "Doug Knox MS-MVP" <dknox@mvps.org> wrote:
>
>> If all you wanted was Internet Explorer, for example, you would set
>> the Shell value on a per-user basis to run Internet Explorer in kiosk
>> mode:
>>
> <trimmed>
>
> So then it does mean changing the shell. I do the same, only I use my own
> program instead of internet explorer - which gives me a lot more options.

CodeConqueror
07-10-2005, 12:14 AM
How to disable Ctrl+Alt+Del in NT/2000/XP

There have been many people asking how to do this, so since someone
helped me find it, I figured I'd help any others that are looking for
this. The URL is:

http://www.codeproject.com/win32/AntonioWinLock.asp

The page explains what was done, how it was done, why it was done and
gives the source code to the DLL and sample apps for VB and C++.

Once you have the DLL in your project's path or in Windows\System32,
just call it using:

<CODE SNIPPET>
Private Declare Function CtrlAltDel_Enable_Disable Lib "WinLockDll.dll"
(ByVal bEnableDisable As Boolean) As Integer

Private Sub Command1_Click()
CtrlAltDel_Enable_Disable False '**** Disable use of Ctrl+Alt+Del End
Sub

Private Sub Command2_Click()
CtrlAltDel_Enable_Disable True '**** Enable use of Ctrl+Alt+Del End Sub
</CODE SNIPPET>
</CODE SNIPPET>

Enjoy all.


disable ctrl-alt-del