Would you like to learn how to use a group policy to require users to press CTRL + ALT + DEL before login on Windows? In this tutorial, we will show you how to create a group policy to enable the secure login feature on the domain computers.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 10
• Windows 7

Equipment list

Here you can find the list of equipment used to create this tutorial.

This link will also show the software list used to create this tutorial.

Tutorial GPO - Press CTRL + ALT + DEL before login

On the domain controller, open the group policy management tool.

Windows 2012 - Group Policy Management

Create a new group policy.

Windows 2012 - Group Policy Objects

Enter a name for the new group policy.

Windows - Add GPO

In our example, the new GPO was named: MY-GPO.

On the Group Policy Management screen, expand the folder named Group Policy Objects.

Right-click your new Group Policy Object and select the Edit option.

Windows - Edit GPO

On the group policy editor screen, expand the Computer configuration folder and locate the following item.

Copy to Clipboard

Access the folder named Security options.

GPO - Local security options

Disable the item named Interactive logon: Do not require CTRL + ALT + DEL.

GPO - Require CTRL ALT DEL logon

To save the group policy configuration, you need to close the Group Policy editor.

Congratulations! You have finished the GPO creation.

Tutorial GPO - Require CTRL + ALT + DEL before login

On the Group policy management screen, you need to right-click the Organizational Unit desired and select the option to link an existent GPO.

Windows-2012-Applocker application

In our example, we are going to link the group policy named MY-GPO to the root of the domain.

GPO- tutorial linking

After applying the GPO you need to wait for 10 or 20 minutes.

During this time the GPO will be replicated to other domain controllers.

Reboot a computer and verify if the login screen requests the user to press CTRL + ALT + DEL.

Windows - Rename the Guest account

In our example, the local guest account was renamed to Broly.