WlxSASNotify and Windows Credential Provider

Question

I am trying to figure out if there is a way for me to trap Ctrl-Alt-Del in a Windows 7 Credential Provider. I know we could do this in the GINA days using WlxSASNotify and I remember reading in the Vista Cred Prov document that there was no way to trap the SAS any more.

Have there been any updates since? I have been Googling for a fair bit and haven't found anything specific on Windows 7 Cred Prov.

Thanks!

Answer 1

It can't be done. CTRL-ALT-DEL is handled by Winlogon.exe, like always. Up to Windows XP, you could not exactly "trap" it, but you could tell Winlogon what to do when it received it, even going as far a showing your own UI.

Now CTRL-ALT-DEl launches LogonUI.exe and the only thing you can tell it is the UI fields that should be displayed. You cannot see, let alone communicate with Winlogon.

Displaying a modal dialog on SetSelected should work, and I understand it does work for you, but there is no guaranty that it will always work. LogonUI could force itself always on top, it could run the credential provider under another process/user account that does not have the rigths to the desktop.

If at all possible, I would try to stick with the default behavior...