Sending Messages to the GINA

Winlogon sends messages to the GINA while dialog boxes are displayed. These messages are all encapsulated in the WLX_WM_SAS message as follows.

Secure attention sequence type in wParam parameter Description
WLX_SAS_TYPE_CTRL_ALT_DEL Indicates that a CTRL+ALT+DEL key sequence was received.
WLX_SAS_TYPE_SC_INSERT Indicates that a smart card has been inserted into a compatible device.
WLX_SAS_TYPE_SC_REMOVE Indicates that a smart card has been removed from a compatible device.
WLX_SAS_TYPE_USER_LOGOFF Indicates that a user requested logoff.
WLX_SAS_TYPE_SCRNSVR_TIMEOUT Indicates that the screen saver should be run due to lack of user input.
WLX_SAS_TYPE_TIMEOUT Indicates that no user input was received within the specified time-out period.


For time-outs and logoffs, Winlogon will close the dialog box after the message has been sent. This message is sent so the dialog box operation can respond in a useful manner (for example, by closing itself down if a logoff has occurred).

For input time-outs, the dialog box is closed with the code WLX_DLG_INPUT_TIMEOUT.

For screen saver time-outs, the dialog box is closed with the code WLX_DLG_SCREEN_SAVER_TIMEOUT.

For logoffs, the dialog box operation is closed with the code WLX_DLG_USER_LOGOFF.

Initializing Winlogon

Winlogon States

Supported Dialog Box Service Time-out Operations

Winlogon Support Functions