I found, ha ha ha, I'm happy ;P After some days of struggling I used in WlxSasNotify, dwSasType =WLX_SAS_TYPE_CTRL_ALT_DEL (indicates that user has typed the standard CTRL+ALT+DEL SAS) and solve the ptoblem. Anyway, thank you folk thinking on my problem. meridian22ca@yahoo.com