Hi guys, I am looking for the API's that are used by Winlogon.exe when the user presses CTRL+ALT+DEL to authenicate with either the SAM or Active Directory.

A Simple guess is it will require
LogonUser
CreateDesktop
SwitchDesktop
Just a guess, I used these APIs to unlock a workstation but what API's do I need to have Winlogon call to log the user in?

Thanks!