When using Citrix Presentation Server and smart card logon, it is possible to get to a GINA (Graphical Identification and Authentication) logon prompt with the above message.

To recreate:

- Logon to a Citrix session with a smart card inserted
- At the pin prompt press cancel

Under terminal services the CTRL-ATL-DEL sequence is passed through to the client session using the CTRL-ALT-END key combination.

Under Citrix the CTRL-ALT-DEL sequence is passed through to a session using the CTRL-F1 key combination.

Under Linux v6 on a Wyse Winterm thin client the CTRL-ATL-DEL sequence is passed through to the client session using the CTRL-ALT-DEL key combination.

Under VMware the CTRL-ATL-DEL sequence is passed through to the client session using the CTRL-ALT-INS key combination

Using CTRL-F1 will allow further actions in the GINA under Citrix.

The resources in the GINA can be edited using Resource Hacker available from:

http://www.angusj.com/resourcehacker/

The issue is that the GINA appears to fall back to msgina.dll for re-authentication tasks, which cannot be replaced due to Windows File Protection.

A copy of the GINA can be edited and chained using the following registry value, but will only be used for initial authentication:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
"CtxGinaDLL"="MyGina.dll"

Ripped off by Citrix: http://support.citrix.com/article/CTX113235