CTRL+ALT+DEL can't be pressed for 2 min after restart. Works instantly after log out.

Question

Hi,

After going through CIS hardening on a computer a problem occured. After a restart i am not able to press CTRL+ALT+DEL for 2 min (on the second). If i log out an account the CTRL+ALT+DEL is available instantly.

I am able to access the shut down and easy of access buttons but the "Press CTRL+ALT+DEL to unlock", clock and date does not appear until 2 min has passed.

I'm sure there is a setting i'm missing but i cant find it. Any ideas?

Im running Windows 10 LTSC 2021.

Edit: After disabling: "Interactive logon: Dont display last signed in" i noticed i actually can log in directly after restart. But the CAD promt does'nt come up until after 2 min passed.

I tested the same settings on a computer with Windows 10 LTSB 2016 and the CAD promt comes isntantly after restart.

So the question now is why does'nt the CAD promt show instantly after restart?

Answer 1

Hello Emil,

First, I would recommend to check System and Application Event logs to see what is happening in the computer during that time. Maybe there is some load job, AD job or similar that is delaying the load.

Then I would suggest to review the GPO configuration in the security policies. You can edit "Local Security Policies" for a non-domain joined computer by running the command gpedit.msc

Look for the policy: Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options

There you can find the next related policies:

-Interactive Logon: Machine inactivity limit: This policy sets the maximum amount of time that a computer can remain inactive before it requires the user to log in again. If this is set too high, it might contribute to the delay.

Interactive Logon: Message delay: This policy specifies the number of seconds to delay the display of the CAD prompt and any configured legal notices. Ensure that this policy is not configured with a significant delay.

-Interactive Logon: Message title for users attempting to log on: This allows you to specify a title for the CAD prompt.

-Interactive Logon: Message text for users attempting to log on: this policy allows you to specify a message that appears on the CAD prompt.

-Interactive Logon: Do not require Ctrl+Alt+Del: If this is enabled it will bypass the CAD step to login

--If the reply is helpful, please Upvote and Accept as answer--