Disable Windows Safe Mode for Extra Security to Prevent Tampering

Posted By Raymond In Category: Computer

Aug
15
2008
Donate

Whenever Windows is not working properly, most of the time the first thing that I will do is to boot into Safe Mode and see if the problem still persists. If a Windows that will only boot into its safe mode typically has a major problem, such as disk corruption or the installation of poorly configured software or driver that prevents the operating system from successfully booting into its normal operating mode.

Windows in safe mode will have reduced functionality, but the task of isolating problems is easier because many non-core components are disabled (turned off). Safe mode typically provides access to utility and diagnostic programs so a user can troubleshoot what is preventing the operating system from working normally. Safe mode is intended for maintenance, not functionality, and provides minimal access to features.

Although Safe Mode is very useful for troubleshooting computer problems, it can also be used to bypass some security software that autostarts in normal Windows. An example is if you installed an internet monitoring software which restricts your children to use the computer an hour a day, your kid can simple boot in to Safe Mode and use the computer the whole day… There are times we need to disable Safe Mode for extra security.


At first I found a software called NOSafeMode which claims to be able to disable F8, disable Safe Mode and disable Advanced Boot Options in Windows NT based Operating Systems (Including Windows 2000, Windows XP and Windows Vista). It is a simple tool of less than 60KB in size, portable, does not hack or modify the operating system files or registry and can disable ALL keys during boot process so the system boots without any interference. I don’t know whether this tool truly exist or not because I couldn’t find any image or screenshot for NOSafeMode and it cost €19.95. If you have any information on NOSafeMode, please share it with me.

As for the free method, you’ll have to modify your registry, so just follow the steps below on how to disable Safe Mode.

1. Go to Start > Run
2. Type regedit and click OK
3. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot
4. Expand SafeBoot by clicking the + sign and you should see 2 keys with the name Minimal and Network.
5. Rename both of the keys to something else, example, Minimal to MinimalX and Network to NetworkX.
SafeBoot Minimal Network

Now if you try to boot in to Safe Mode, doesn’t matter if you select the normal Safe Mode, or Safe Mode with Networking or Safe Mode with Command Prompt, the computer will auto reboot or get a blue screen of death (BSOD).

Blue Screen in Safe Mode

To enable Safe Mode back, just rename MinimalX to Minimal and NetworkX to Network. I know that this solution is not perfect because if the person knows about this trick, he/she can simply modify the registry to re-enable back Safe Mode. However, it does give some level of protection against an average computer user (or non raymond.cc readers :P )

If you’re not comfortable in modifying your system’s registry, I found a very small free tool called Enable/Disable SafeMode which allows you to enable or disable SafeMode. Basically it does the same thing as the above which is modifying the SafeBoot keys. You can also set an application-password to prevent unauthorized access to this tool.

Enable Disable SafeMode

Very easy to use as the tool is pretty much self explanatory. Actually if you can create a Limited User account, you wouldn’t need to use this registry hack because a limited user cannot even access the registry. So this is a solution to those that for some reason don’t want to create a Limiter User.

[ Download Enable/Disable SafeMode ]


Related posts:
  • Reboot to Safe Mode for Dummies
  • Disable AutoRun CD in Windows for Better Security
  • Is it Safe to Delete HIBERFIL.SYS and PAGEFILE.SYS?
  • How To Disable, Uninstall or Remove Windows Defender in Vista
  • Novell Disable Login Feature in Windows With Network Share Monitoring
    • theluler

      thanks for the tip, however i think ill keep my safemode, need it too much :P

    • MR7

      The question is, what if you have some problem with your regular boot and can’t modify your registry? Some virus disable regedit and can be removed only in safe mode. It’s a little risky in this case…

    • http://www.raymond.cc/ Raymond

      No worries about that MR7. There is always a way to edit the registry without booting in to Windows. If you’ve missed the post, you can check it out here.
      http://www.raymond.cc/blog/archives/2008/07/02/how-to-edit-windows-registry-key-values-without-booting-in-windows/

    • Tejaswi

      Raymond I want the blue screen errors to be completely removed…
      I dont want such errors to be present..
      DO u have a solution that is the all in one For every problem of blue screens….!

    • Ishaan

      Hey thx for this tip…good i require this one…

    • Prashanth

      Thanks Raymond.

    • http://www.releaselive.com Ibrahim Rabbani

      raymond.. great post and all.. but don’t we need safemode to solve some problems with your windows.. disabling startup apps etc..

    • Duane White

      This week I worked on a computer heavily infected with malware, crapware, and no less than 5 rootkits. The computer would not boot into Safe Mode (throwing the specific BSOD you mention) which did make it harder to put right, but I kept at it and did eventually suceed in cleaning it up except it still would not boot in Safe Mode.

      In searching for a reason for the Safe Mode boot failure I found your page. Sorry to say it appears the bad guys know this trick as on on this particular system \\\\\\\”something\\\\\\\” just plain deleted the two registry keys you mention.

      I know how to pull the original keys from the copies of the Registry in the …\\\\\\\\System32\\\\\\\\Repair folder and that will probably make the system able to boot in Safe Mode, but I\\\\\\\’m going to recommend starting over to the owner (in hindsight I really should have insisted on that straight-away when I realized how seriously infected the system was).

    • http://Justafeedback..... Upendra Gurung

      Hey Raymond…..
      I think this is the first time that I’m giving a feed back to you… Any how those tricks were the best to block one to go in safe mode, but….. we have to look both sides…… I means to say that suppose now a days there are lots or trojans, spyware, malware ….. those can disable your access to registery… in this case what should one do to get access in registery…….

    • http://Justafeedback..... Upendra Gurung

      Hello Raymond , once again I’m here with one of mine problem , that I want the blue screen errors to be completely removed… from mine system &
      I don’t want such errors to be present.. in mine system, so dO you have a solution that is the all in one For every problem of blue screens……?

    • Deyaa Addeen Fahmy Shedeed

      thank you very much.

      If possible How can I prevent login BIOS by regedit or How can I stop F10 Botton Or Delete Botton by regedit ?

      thanks anyway.

    • http://guino.home.insightbb.com/nosafemode.html Boris Hart

      I looked for a solution for disabling F8 and boot menus in our product machines, decided it was worth trying NoSafeMode and it works great!

      Just wanted to share the result.

    • Username

      Ich, kapiere das nicht. Ich möchte meinen den Abgesicherten Modus deaktivieren damit ich wieder Dateien Downloaden kann. Ich habe alles bis zum “MinimalX” und “KNetworkX” gemacht der downloadet aber immernoch nichts. immer noch der gleiche Müll. Bitte helft mir.

    • =\VIP\=*UndeaD*=

      Ув. Специалисты у меня следующая проблема: У меня заблокирован комп и нечего не могу сделать ! Подскажите как его моно разблокировать.
      Заранее спасибо.

    • =\VIP\=*UndeaD*=

      Реймонд! у меня такая проблема: у меня заблокированый комп и я не могу его разблокировать.
      что можно сделать?

    • ][VrS][

      thx 4 this information ;)…i used this 4 my new program!:)

    • shawn conner

      I wanted to thank you for the link to enable and disable the safemode. We bought my nine year daughter her first MP3 and it would not work on her computer. An error code came up stating it was running in safe mode. I’m at best an informed amatuer, so I went into search mode and found your website. Once I downloaded the enable/disable file her MP3 worked great. You saved the day for a happy little girl, thank you.

    • Joazin

      QUERO DAR MEU parabens a vocês por trazerem a cada ANUS um PROGRAMA a cada dia, melhorando a vida dos USUARIOS DE qualquer forma tem uma parte do programa que é uma DROGA, que é a parte da lingua estrangeira

    • http://pckeeper.zeobit.com Disk cleaner

      I never thought that the Safe Mode option in Windows could cause any other problems than Windows OS normally does. Deactivating it is a very good solution. I will use it if I will encounter any other problems when dealing with my Windows XP installation. Thank you for the article!

    • Jésus SUAREZ

      Bonjour,

      Voici le lien pour le logiciel NOSafeMode :
      http://guino.home.insightbb.com/nosafemode.html

      Mais je le déconseille car il désactive toutes les touches. Alors si le système se bloque il tourne en boucle. J’en ai fais l’expérience et heureusement que le logicel était à l’essai une journé, après tout c’est désactivé. Par contre l’utilitaire que vous avez en lien pour activer ou désactiver le SafeMode est excéllent car il ne bloque, en mode sans échec, que les comptes limité .

    • andra

      thank you 4 tips & ticks

    • Gerhard

      if you dont want someone changing the registry to enable safemode then just delete the regedit.exe file in the windows folder. backup it on a flash drive and run it from there if you need to change anything

    • http://PARABÉNSFUNCIONOUNOWINDOWS7ULTIMATE FABIO FOMP

      PARA UM USUARIO NAO ADMINISTRADOR FUNCIONOU PERFEITO SEU PROGRAMINHA.

    Copyright © 2005-2012 - Raymond.CC Blog