Control-Alt-Delete
This article is about Control-Alt-Delete, the keyboard shortcut. For the webcomic, see Ctrl+Alt+Del.
Control-Alt-Delete (often abbreviated to Ctrl-Alt-Del) is a computer keyboard command on IBM PC compatible systems that can be used to reboot the computer. It is given by simultaneously pressing the Control, Alt, and Delete keys.
This keyboard combination was designed by David Bradley, a designer of the original IBM PC. Bradley originally designed Control-Alt-Escape to trigger a soft reboot, but he found it was too easy to bump the left side of the keyboard and reboot the computer accidentally. He switched the key combination to Control-Alt-Delete, a combination impossible to press with just one hand (this is not true of later keyboards, such as the 102-key PC/AT keyboard or the Maltron keyboard). More advanced operating systems use its status as a "reserved" combination for various purposes, but often retain the ability to trigger a soft reboot in certain configurations or circumstances. David Bradley is also known for his good-natured jab at Bill Gates, at that time the CEO of Microsoft, and also the creator of many of Microsoft's programs: "I may have invented Control-Alt-Delete, but Bill [Gates] made it famous", alluding to the instability of early Microsoft operating systems.
Colloquially, the combination is also known as a three-finger salute, or more esoterically, a Vulcan nerve pinch.
DOS and all real mode systems
On a PC running DOS or a system that runs in real mode, this keystroke combination is recognized by the keyboard handling code in the BIOS and treated as the 8086 non-maskable-interrupt signal, which, unless the system is horribly hung, invokes a soft reboot.
DOS-based Windows
In DOS-based Windows (including both Windows 3.x and its successors; Windows 95, Windows 98, and Windows ME), this keystroke combination is recognised by the Windows keyboard device driver. According to the value of the LocalReboot option in the [386Enh] section of system.ini, Windows performs one of several actions in response:
- If LocalReboot=Off it performs a soft reboot.
- If LocalReboot=On:
- Windows 3.x presents a blue screen to the user inviting them to press Enter to end the current task or press Control-Alt-Delete again to perform a soft reboot.
- Windows 95, Windows 98, and Windows ME, present a window which lists currently running processes, and can be used to kill them, or press Control-Alt-Delete again to perform a soft reboot.
Killing tasks/processes is useful, for instance, if a program has entered an infinite loop. Theoretically, the system's other processes should continue normally--in practice, using this key combination to terminate a program/process in Windows 3.x can result in "secondary damage" that may destabilize the system. As such, it is strongly recommended that, following a process kill in these versions of Windows, any work should be saved in any other applications and Windows should be restarted. Such damage is much less likely in newer versions of DOS-based Windows because of resource tracking.
Entering the combination twice in succession in DOS-based Windows will trigger a soft reboot, even if Windows has not yet been able to display the process listing (due to problems caused by other processes). This allows the user to over-ride any "stuck" process, since no user-level program is able to define its own response to the Control-Alt-Delete key combination.
OS/2
In OS/2, this keystroke combination is recognised by the OS/2 keyboard device driver, which notifies the session manager process. The normal session manager process in OS/2 versions 2.0 and later is the parent Workplace Shell process, which displays the "The system is rebooting" window and triggers a soft reboot. If it is pressed twice in succession OS/2 triggers an immediate soft reboot, without waiting for the session manager process.
In both cases, the system flushes the cache, cleanly unmounts all disc volumes, but does not cleanly shut down any running programs (and thus does not save any unsaved documents, or the current arrangements of the objects on the Workplace Shell desktop or in any of its open folders).
Linux
In Linux, this keystroke combination is recognised by the keyboard device driver in the kernel. In the absence of more specific instructions, which will usually only be during system initialisation, the kernel directly initiates a soft reboot in response. More commonly, the kernel will send a signal to the init process, which will perform an administrator-configured task, such as running a script.
In many Linux distributions, init is configured to switch run levels and to perform a soft reboot in response to the signal. Thus it provides a mechanism for a person with physical access to the keyboard to perform system shut down (a task that only the superuser has permission to initiate programmatically).
The keystroke can pose a security risk, in that a user can place the machine into single user mode after the machine reboots. Single user mode does not require a password and works in superuser mode, which would in effect give the user unrestricted access to the machine. Linux systems can be configured to ignore the keystroke combination.
Windows NT
In Windows NT, and thus on its successors, including, Windows 2000, Windows XP and Windows 2003 this keystroke combination is recognised (as a system-wide "keyboard hook") by the Winlogon process which in response performs one of the following tasks (or rather, delegates these to the default GINA):
- If nobody is logged in, bringing up the login dialog to allow the user to log in
- Otherwise, bringing up the "Windows Security" dialog, where the user can lock the computer, change their password, log out, shut the computer down, or invoke the Task Manager.
- If the security system is turned off, Ctrl-Alt-Del directly invokes the Task Manager.
The design of Windows NT is such that, unless security is already compromised in some other way, only the WinLogon process, a trusted system process, can receive notification of this keystroke combination (because it is the first to register the keyboard hook). This keystroke combination is thus a secure attention key. A user pressing Control-Alt-Delete can be sure that it is the operating system (specifically the WinLogon process), rather than a third party program, that is responding to the key combination, and that it is therefore safe to enter a password. It was chosen as the secure attention key in Windows (instead of, for example, the System Request key), because on the PC platform no program could reasonably expect to redefine this keystroke combination for its own purposes.
It is also a reliable method for bringing up the Task Manager. All other keystroke combinations could potentially be exclusively tied up by a process that is stuck, but a user process is not able to intercept the Control-Alt-Delete sequence.
As a side effect, users that do not have physical access to the computer's power supply and power/reset switches can be denied the ablilty to shut down or restart the computer, where previously (on MS-DOS and other variants of Windows) they could always use Control-Alt-Delete.
References
- "Windows 3.1 Resource Kit SYSTEM.INI 386ENH Section A-L". Microsoft's KnowledgeBase article 83435. January 7.
{{cite web}}: Check date values in:|date=and|year=/|date=mismatch (help) - Linux manual pages for kill(2) and reboot(2).
- Template:Newsgroup reference Google — a report of the effect of
LocalRebootin Windows 95 - Template:Newsgroup reference Google — a report of differences in
LocalRebootbetween Windows 3.x and Windows 95