Ctrl+Alt+Del Sign-in in Windows 11 & 10: Turn It On or Off

To turn the Ctrl + Alt + Del sign-in on or off in Windows 11 or 10, press Win + R, type netplwiz, open the Advanced tab, and check or clear Require users to press Ctrl+Alt+Delete under Secure sign-in. Click OK and it applies at the next sign-in. If that box is grayed out, a policy is in charge; the Local Security Policy and registry routes below override it, and on a work PC your IT department sets it. Here is why the screen exists at all, and it is the reason worth knowing before you turn it off: Ctrl + Alt + Del is the one key combination no program can intercept. Windows reserves it at the deepest level, so when you press it, you are guaranteed to be talking to the real Windows sign-in, not a fake screen a piece of malware has painted to steal your password.

Jake ran into both sides of it. His new office laptop suddenly demanded Ctrl + Alt + Del before every sign-in, and he assumed something had gone wrong. Then, working on a client's PC through Remote Desktop, he pressed Ctrl + Alt + Del to unlock it and his own laptop's lock screen appeared instead. Ethan explained both in a sentence each: the office laptop had joined the company domain, where the requirement is switched on by default, and inside a remote session the combination is Ctrl + Alt + End, because your own PC always grabs the real one first. This page covers turning it on and off, the right key combination for every situation, and what to do when it does nothing.

If you only need the switch, the box above has it. If you want to decide whether you should flip it, the next section takes two minutes.

Why Windows asks for Ctrl + Alt + Del at all

Ctrl + Alt + Del is what Windows calls the Secure Attention Sequence. When you press it, the keyboard signal goes straight to the part of Windows that handles sign-in, before any app gets a look. No program, however it was installed, can catch that key combination or pretend to be the screen it opens. It has worked this way since Windows NT in the 1990s, which is why it has survived every redesign since.

That matters because of one specific trick: a program that draws a perfect copy of the sign-in screen and waits for you to type your password into it. Without the requirement, you cannot tell the fake from the real one by looking. With it, the habit of pressing Ctrl + Alt + Del first means the fake never gets your keystrokes, because pressing the combination always hands control to the real Windows screen, wherever you are.

How much protection that buys depends on the PC:

• A home PC only you use, with a PIN or Windows Hello, gains very little. Turning the requirement off is a reasonable convenience call.
• A shared PC, a family computer or a reception desk, gains more, because you cannot be sure what the last person ran.
• A work PC on a domain has it on by default for exactly this reason, and it is usually not yours to change.

Turn Ctrl + Alt + Del secure sign-in on or off with netplwiz

This is the simplest method and works on every edition of Windows 11 and 10, including Home.

1. Press Win + R, type netplwiz, and press Enter. (Typing control userpasswords2 opens the same window.) Click Yes if Windows asks for permission.
2. In the User Accounts window, open the Advanced tab.
3. At the bottom, under Secure sign-in, check Require users to press Ctrl+Alt+Delete to turn the requirement on, or clear it to turn it off.
4. Click Apply, then OK.

Lock the PC with Win + L to see the result. With the requirement on, the lock screen shows "Press Ctrl+Alt+Delete to unlock" instead of going straight to the password or PIN box.

The same netplwiz window is where you manage automatic sign-in, which the automatic sign-in guide covers. The two settings work together: automatic sign-in skips the sign-in screen at startup, while the Ctrl + Alt + Del requirement applies whenever the screen does appear, such as after locking.

When the box is grayed out: Local Security Policy and the registry

A grayed-out check box in netplwiz means a policy is controlling the setting. There are three places it can be set, and the most specific one wins.

Local Security Policy (Windows 11 and 10 Pro, Enterprise, Education)

1. Press Win + R, type secpol.msc, and press Enter.
2. Go to Security Settings → Local Policies → Security Options.
3. Double-click Interactive logon: Do not require CTRL+ALT+DEL.
4. Choose Disabled to require Ctrl + Alt + Del, or Enabled to not require it. (The double negative trips everyone up: Enabled means the key press is not needed.)
5. Click OK. It applies at the next sign-in.

Change it in the registry (works on Windows 11 and 10 Home)

The setting is the DWORD DisableCAD. Open an administrator Command Prompt (the CMD as administrator guide shows how) and run one of these:

:: require Ctrl+Alt+Del
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DisableCAD /t REG_DWORD /d 0 /f

:: do not require it
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v DisableCAD /t REG_DWORD /d 1 /f

A policy-managed copy of the same value can also exist at HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, and when it does, it overrides the Winlogon one and grays out netplwiz. If you set the Winlogon value and nothing changes, check that location. If regedit refuses to write either, the registry write error guide explains why.

Is Ctrl + Alt + Del required by default? It depends on the PC

Type of PC	Ctrl + Alt + Del required by default?	Who can change it
Home PC, not joined to a domain	No	Any administrator on the PC
Work PC joined to an Active Directory domain	Yes	Usually IT, through Group Policy
Work PC managed by Intune (Entra joined)	Depends on the company's policy	IT, through Intune
PC set up with a tweak tool or by a technician	Whatever they set	Any administrator, unless they used a policy

That table is Jake's laptop story in one line: the day it joined the company domain, the default flipped.

Ctrl + Alt + Del in Remote Desktop, virtual machines, Mac and Linux

Because your own PC always catches the real combination first, you need a different one whenever the Windows you want to talk to is not the one under your fingers. The keyword data says these are the versions people search for most:

Where you are	What to press	Or use
Remote Desktop (RDP) session	Ctrl + Alt + End	Inside the session: Start → Windows Security, or the on-screen keyboard
Hyper-V virtual machine	Ctrl + Alt + End	The Ctrl+Alt+Delete button on the VM window's toolbar
VMware Workstation or Player	Ctrl + Alt + Insert	VM menu → Send Ctrl+Alt+Del
VirtualBox	Host key + Del (Host key is Right Ctrl by default)	Input → Keyboard → Insert Ctrl-Alt-Del
Windows on a Mac keyboard (Boot Camp, Parallels)	Ctrl + Option + Fn + Delete	Parallels: Devices → Keyboard → Ctrl+Alt+Del
Mac itself (no Windows)	Cmd + Option + Esc opens Force Quit, the closest equivalent	Activity Monitor for the full picture
Linux desktop	Varies: GNOME shows a log-out dialog; on a text console it reboots	A system monitor app for frozen programs
Windows tablet with no keyboard	Windows button + Power button	Attach a keyboard

The Remote Desktop case is the one that catches the most people, because pressing the real combination appears to do something: it opens your PC's security screen. Press Escape to go back to the session and use Ctrl + Alt + End.

What the Ctrl + Alt + Del menu does

Once you are signed in, pressing Ctrl + Alt + Del does not restart anything. It opens a full-screen menu with these options:

• Lock: the same as Win + L. Your apps keep running.
• Switch user: lets someone else sign in while you stay signed in. The switch user guide has the other ways in.
• Sign out: closes your apps and signs you out.
• Change a password: for local accounts and domain accounts; Microsoft accounts are changed online.
• Task Manager: for closing a frozen app. Ctrl + Shift + Esc opens Task Manager directly, skipping the menu.
• The network, accessibility and power icons in the bottom-right corner.

This menu is drawn on Windows' separate secure desktop, the same one the User Account Control prompt uses, which is why it still appears when an app has frozen the rest of the screen.

Ctrl + Alt + Del not working: the fixes

Nothing happens at all

• Try the keys on the other side. Use the right-hand Ctrl and Alt, or the Delete key on the number pad with Num Lock off. A single dead key is the most common cause.
• Check for stuck or sticky keys. Open Settings → Accessibility → Keyboard and turn off Sticky keys and Filter keys, both of which change how key combinations register.
• Test with the on-screen keyboard. At the sign-in screen, the accessibility icon in the corner opens it; if Ctrl + Alt + Del works there, the physical keyboard is the problem.
• Wireless keyboard? Low batteries often drop one key of a three-key combination. Try a wired keyboard.

Not working on the login screen

If the lock screen asks for Ctrl + Alt + Del and pressing it does nothing, try Win + L, then press any key or click; on some PCs that brings up the password box. If the keyboard works elsewhere but not here, restart the PC with the power icon in the bottom-right corner. A keyboard that does not work until Windows has fully loaded (some USB keyboards behind a hub, some Bluetooth keyboards) needs to be plugged directly into the PC, because the sign-in screen runs before Bluetooth pairing is restored.

Not working in Windows 11 after an update

A driver problem after an update can stop a keyboard registering combinations. Check Device Manager for a warning on the keyboard, and roll back or reinstall the driver. If the computer is a work PC and the prompt itself changed after an update, a new policy may have arrived; ask IT before changing it.

For IT admins: managing the Ctrl + Alt + Del requirement

The setting is the security option Interactive logon: Do not require CTRL+ALT+DEL, under Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options. Set it to Disabled to require the key press. In Intune, it is Local Policies Security Options → Interactive Logon Do Not Require CTRLALTDEL in the settings catalog. Both write the policy-backed DisableCAD value that grays out netplwiz for users.

• Domain-joined machines require it by default since Windows 8. If users report the prompt appearing "suddenly", check whether the machine just joined the domain before suspecting a problem.
• Pair it with a logon banner (Interactive logon: Message title/text for users attempting to log on) if policy requires one; the banner appears after Ctrl + Alt + Del.
• Kiosks and shared terminals often disable it for usability; if you do, compensate with automatic lock timeouts and Assigned Access.
• Helpdesk script for remote users: "In a Remote Desktop session press Ctrl + Alt + End" resolves a surprising share of "I can't unlock it" tickets.

Jake left the requirement on for his office laptop once he knew what it was for, and he has Ctrl + Alt + End written on a sticky note by his monitor for remote sessions. Ethan turns it off on single-user home PCs and leaves it on everywhere else. Both are sensible. The three keys are not an obstacle Windows puts in your way; they are a handshake that proves the screen in front of you is really Windows. If yours appeared without warning, nothing is wrong, and now you know where the switch is.

Revision note. Written October 1, 2026, for the sign-in screens in current Windows 11 and Windows 10. If your laptop started asking for three keys this week, it is protecting you, and the switch is yours whenever you want it.