Enforce Ctrl+Alt+Del Secure Login via Regedit

Enforcing the Secure Attention Sequence (SAS)—commonly known as pressing Ctrl+Alt+Del before logging in—enhances Windows security by ensuring users interact with the authentic Windows logon interface rather than credential-harvesting spoof programs. This guide details the exact steps an administrator must take to enforce this requirement across Windows systems by modifying the Windows Registry using Regedit.

Step-by-Step Registry Configuration

To mandate the Ctrl+Alt+Del prompt at the logon screen, an administrator must modify the DisableCAD value in the system policies registry key.

  1. Open the Registry Editor:
    • Press Windows Key + R to open the Run dialog.
    • Type regedit and press Enter or click OK.
    • If prompted by User Account Control (UAC), click Yes to grant administrative privileges.
  2. Navigate to the Policy Key:
    • In the left-hand navigation pane, paste or navigate to the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  3. Locate or Create the DisableCAD Value:
    • Look for a DWORD value named DisableCAD in the right-hand pane.
    • If DisableCAD does not exist:
      • Right-click anywhere in the empty space of the right-hand pane.
      • Select New > DWORD (32-bit) Value.
      • Name the new value DisableCAD and press Enter.
  4. Configure the Value Data:
    • Double-click DisableCAD to open its properties.
    • Under Base, select Hexadecimal (or Decimal).
    • In the Value data field, enter 0.
      • 0: Enforces the Ctrl+Alt+Del requirement (disables the bypass).
      • 1: Disables the Ctrl+Alt+Del requirement.
    • Click OK to save the changes.
  5. Apply the Changes:
    • Close the Registry Editor.
    • Restart the computer or sign out of the current user account to apply the new logon security policy. Upon reaching the lock or welcome screen, Windows will now prompt the user to press Ctrl+Alt+Del before displaying the login credentials field.