Clear, practical technology insights BSOD Code Lookup · Windows Error Code Lookup · Wi-Fi Troubleshooting · PC Troubleshooting Checklist

How to Hide “Change a Password” from the Ctrl+Alt+Delete Screen

Remove the Change a password command from the Windows security screen with Group Policy or a per-user registry value, and restore it when needed.

Table of Contents

Windows normally shows Change a password after you press Ctrl + Alt + Delete. If you manage a shared or restricted PC, you can hide that command for the current user. This does not change the password or prevent every other password-reset method; it only removes this entry from the Windows security screen.

Change a password option on the Ctrl Alt Delete screen

Before you begin

  • The Group Policy method is the clearest option on Windows Pro, Enterprise, and Education editions.
  • Windows Home does not normally include Local Group Policy Editor, so use the Registry method instead.
  • These settings apply to the current user. On a work or school device, an administrator, domain policy, or mobile-device-management policy may control the setting.
  • A Windows Hello PIN and an account password are different credentials. Hiding this command does not remove PIN settings.

This setting is also separate from the policy that requires Ctrl + Alt + Delete before sign-in. For more context about that trusted Windows security sequence, see what the Windows Security button does.

Method 1: Use Local Group Policy Editor

  1. Press Windows + R, type gpedit.msc, and press Enter.

    Opening Local Group Policy Editor

  2. Go to:

    User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options

    Ctrl Alt Del Options in Group Policy

  3. Open Remove Change Password.

    Remove Change Password policy

  4. Select Enabled, then choose Apply and OK.

    Enabling Remove Change Password policy

  5. Sign out and sign back in, or restart Windows, if the change is not visible immediately.

Despite the wording, enabling Remove Change Password hides the command. To restore it, set the policy to Not Configured or Disabled.

Method 2: Change the setting in Registry Editor

Editing the registry incorrectly can affect Windows. Before proceeding, select the relevant key in Registry Editor and use File > Export to save a backup.

  1. Press Windows + R, type regedit, and press Enter. Approve the User Account Control prompt.

    Opening Registry Editor

  2. Navigate to:

    HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem

    If the System key does not exist, right-click Policies, select New > Key, and name it System.

    System policy registry key

  3. In the right pane, right-click an empty area and select New > DWORD (32-bit) Value. Name it DisableChangePassword.

    Creating DisableChangePassword registry value

  4. Double-click the value, set Value data to 1, and select OK.

    Setting DisableChangePassword to 1

  5. Sign out and back in, or restart Windows.

To show the command again, set DisableChangePassword to 0 or delete that value. Microsoft documents the same policy name and registry value in its Ctrl+Alt+Del policy reference.

What this setting does not do

The change only hides one interface command. It does not secure an unattended account, stop an administrator from resetting a local password, or prevent a Microsoft account password from being changed online. Use a strong sign-in method and lock the PC when you step away. If you actually need to change a local account password, follow a supported method rather than treating this policy as access control; the Command Prompt password-change guide is relevant only to accounts you are authorized to manage.

Discussion

Reader Comments 0

Sign in with email or Google to join the discussion.