15 Aug
Windows in safe mode will have reduced functionality, but the task of isolating problems is easier because many non-core components are disabled (turned off). Safe mode typically provides access to utility and diagnostic programs so a user can troubleshoot what is preventing the operating system from working normally. Safe mode is intended for maintenance, not functionality, and provides minimal access to features.
Although Safe Mode is very useful for troubleshooting computer problems, it can also be used to bypass some security software that autostarts in normal Windows. An example is if you installed an internet monitoring software which restricts your children to use the computer an hour a day, your kid can simple boot in to Safe Mode and use the computer the whole day… There are times we need to disable Safe Mode for extra security.
At first I found a software called NOSafeMode which claims to be able to disable F8, disable Safe Mode and disable Advanced Boot Options in Windows NT based Operating Systems (Including Windows 2000, Windows XP and Windows Vista). It is a simple tool of less than 60KB in size, portable, does not hack or modify the operating system files or registry and can disable ALL keys during boot process so the system boots without any interference. I don’t know whether this tool truly exist or not because I couldn’t find any image or screenshot for NOSafeMode and it cost €19.95. If you have any information on NOSafeMode, please share it with me.
As for the free method, you’ll have to modify your registry, so just follow the steps below on how to disable Safe Mode.
1. Go to Start > Run
2. Type regedit and click OK
3. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot
4. Expand SafeBoot by clicking the + sign and you should see 2 keys with the name Minimal and Network.
5. Rename both of the keys to something else, example, Minimal to MinimalX and Network to NetworkX.

Now if you try to boot in to Safe Mode, doesn’t matter if you select the normal Safe Mode, or Safe Mode with Networking or Safe Mode with Command Prompt, the computer will auto reboot or get a blue screen of death (BSOD).

To enable Safe Mode back, just rename MinimalX to Minimal and NetworkX to Network. I know that this solution is not perfect because if the person knows about this trick, he/she can simply modify the registry to re-enable back Safe Mode. However, it does give some level of protection against an average computer user (or non raymond.cc readers
)
If you’re not comfortable in modifying your system’s registry, I found a very small free tool called Enable/Disable SafeMode which allows you to enable or disable SafeMode. Basically it does the same thing as the above which is modifying the SafeBoot keys. You can also set an application-password to prevent unauthorized access to this tool.

Very easy to use as the tool is pretty much self explanatory. Actually if you can create a Limited User account, you wouldn’t need to use this registry hack because a limited user cannot even access the registry. So this is a solution to those that for some reason don’t want to create a Limiter User.
[ Download Enable/Disable SafeMode ]
Technorati Tags: safemode, safeboot, nosafemode, boot, security
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
Disable F8 Key to Block Access to Safe Mode during Windows Startup Reboot to Safe Mode for Dummies Uninstall Programs Packaged with Windows Installer in Safe Mode Uninstall Norton IPS 2.0 and Norton Toolbar 4.5 Plugin from Firefox 3.6 Disable Windows Vista User Account Control (UAC) Is it Safe to Delete HIBERFIL.SYS and PAGEFILE.SYS? How To Discover Hidden Wireless Network
Have computer technical problems? Get FREE help from Raymond.CC FORUM
16 Responses for "Disable Windows Safe Mode for Extra Security to Prevent Tampering"
thanks for the tip, however i think ill keep my safemode, need it too much
The question is, what if you have some problem with your regular boot and can’t modify your registry? Some virus disable regedit and can be removed only in safe mode. It’s a little risky in this case…
No worries about that MR7. There is always a way to edit the registry without booting in to Windows. If you’ve missed the post, you can check it out here.
http://www.raymond.cc/blog/archives/2008/07/02/how-to-edit-windows-registry-key-values-without-booting-in-windows/
Raymond I want the blue screen errors to be completely removed…
I dont want such errors to be present..
DO u have a solution that is the all in one For every problem of blue screens….!
Hey thx for this tip…good i require this one…
Thanks Raymond.
raymond.. great post and all.. but don’t we need safemode to solve some problems with your windows.. disabling startup apps etc..
This week I worked on a computer heavily infected with malware, crapware, and no less than 5 rootkits. The computer would not boot into Safe Mode (throwing the specific BSOD you mention) which did make it harder to put right, but I kept at it and did eventually suceed in cleaning it up except it still would not boot in Safe Mode.
In searching for a reason for the Safe Mode boot failure I found your page. Sorry to say it appears the bad guys know this trick as on on this particular system \\\\\\\”something\\\\\\\” just plain deleted the two registry keys you mention.
I know how to pull the original keys from the copies of the Registry in the …\\\\\\\\System32\\\\\\\\Repair folder and that will probably make the system able to boot in Safe Mode, but I\\\\\\\’m going to recommend starting over to the owner (in hindsight I really should have insisted on that straight-away when I realized how seriously infected the system was).
Hey Raymond…..
I think this is the first time that I’m giving a feed back to you… Any how those tricks were the best to block one to go in safe mode, but….. we have to look both sides…… I means to say that suppose now a days there are lots or trojans, spyware, malware ….. those can disable your access to registery… in this case what should one do to get access in registery…….
Hello Raymond , once again I’m here with one of mine problem , that I want the blue screen errors to be completely removed… from mine system &
I don’t want such errors to be present.. in mine system, so dO you have a solution that is the all in one For every problem of blue screens……?
thank you very much.
If possible How can I prevent login BIOS by regedit or How can I stop F10 Botton Or Delete Botton by regedit ?
thanks anyway.
I looked for a solution for disabling F8 and boot menus in our product machines, decided it was worth trying NoSafeMode and it works great!
Just wanted to share the result.
Ich, kapiere das nicht. Ich möchte meinen den Abgesicherten Modus deaktivieren damit ich wieder Dateien Downloaden kann. Ich habe alles bis zum “MinimalX” und “KNetworkX” gemacht der downloadet aber immernoch nichts. immer noch der gleiche Müll. Bitte helft mir.
Ув. Специалисты у меня следующая проблема: У меня заблокирован комп и нечего не могу сделать ! Подскажите как его моно разблокировать.
Заранее спасибо.
Реймонд! у меня такая проблема: у меня заблокированый комп и я не могу его разблокировать.
что можно сделать?
thx 4 this information
…i used this 4 my new program!:)
Leave a reply