Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

By default, when the computers connected to the domains, the secure logon feature of Windows 8 is turned off through Group Policy. I mean, you don't have to press ctrl + alt + del before enter the user name and password. Is it worth to enable this function for Windows 8? And why the behavior was changed since Windows 7, where you had to press ctrl + alt + del?

share|improve this question

closed as primarily opinion-based by Falcon Momot, Ward, Wesley, mdpc, Dave M Aug 16 '13 at 21:08

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers 2

Is it worth to enable this function for Windows 8?

The added security by enabling it and ensuring that a username/pwd is only passed through the real login screen is always a plus.

And why the behavior was changed since Windows 7, where you had to press ctrl + alt + del?

I don't know if MS ever has said publicly that I'm aware of, but my guess would be because Win8 was designed to be multi-platform for use on computers and tablets. Since most tablets lack a full keyboard it was probably done out of necessity (kind of hard to tell people on a tablet to hit ctrl/alt/del) and still allow you to force it if required.

share|improve this answer

The behavior also was optional in Windows 7 through Group Policy (some people enable it, some don't). The reason this is considered "secure" is because the only process that can respond to this combination is the Winlogon.exe process, which prevents malware from displaying fake prompts and capturing your passwords.

For more information, see this SF topic on the issue.

share|improve this answer
    
In our company the policy "Interactive logon: Do not require CTRL+ALT+DEL" is not defined. And as I see on the explain tab of this policy the behavior was changed for Win8: "Default on domain-computers: Enabled: At least Windows 8 / Disabled: Windows 7 or earlier." –  Puzzled Aug 15 '13 at 11:26

Not the answer you're looking for? Browse other questions tagged or ask your own question.