Windows Vista introduced a new group policy setting which controls whether or not software can simulate a Secure Attention Sequence (SAS). An example of such SAS is the CTRL-ALT-DEL combination. This policy needs to be enabled in order for remote control software like (VNC) to send CTRL-ALT-DEL to the remote machine running Windows Vista/Windows 7. You will only need to do this once for a certain remote computer.
Important: Since Windows Vista Home Basic and Windows Vista Home Premium do not have the Group Policy Object Editor, you will not be able to send CTRL-ALT-DEL to machines running those versions of Windows Vista.
There are two ways of setting the needed group policy setting, depending on whether the remote computer is connected to a domain or is a member of a workgroup. Please follow the appropriate section depending on your setup.
Domain procedure (change domain group policy setting)
If the remote computer is connected to a domain, the domain administrator can enable this group policy setting for subdomains or for the entire domain. Please follow these steps:
Important: Only a domain administrator can modify the domain group policy
Important: The domain group policy overrides the local group policy. If the domain group policy is not set, you can use local group policy setting mentioned in the next section.
1. Login to the remote computer as the domain administrator.
2. Click the Start Windows button, select Run, type gpmc.msc and press enter.
3. In the left section, select the desired domain, then right-click and choose Create a GPO in this domain, and link it here.
4. Right-click the new GPO and select Edit.
5. In the left section, please navigate to: Computer Configuration – Administrative Templates – Windows Components – Windows Logon Options
6. In the right section, please double-click on the Disable or enable software Secure Attention Sequence policy and click on Enabled.
7. Set the policy option to Services.
8. Click OK and close the Group Policy Object Editor.
You have now enabled the sending of Ctrl-Alt-Del on all computers that are connected to the domain you selected in step 3.
Workgroup procedure (change local group policy setting)
If the remote computer is a member of a workgroup or is connected to a domain with no domain group policy set, you should follow these steps:
1. Login to the remote computer as a local or domain administrator.
2. Click the Start Windows button, select Run, type gpedit.msc and press enter.
3. In the left section, please navigate to: Computer Configuration – Administrative Templates – Windows Components – Windows Logon Options
4. In the right section, please double-click on the Disable or enable software Secure Attention Sequence policy and click on Enabled.
5. Set the policy option to either Services or Services and Ease of Access applications.
6. Click OK and close the Group Policy Object Editor.
You have now enabled the sending of Ctrl-Alt-Del on the remote computer.