+ Post New Thread
Results 1 to 7 of 7
Windows 7 Thread, Disabling Safe mode and Boot Menu in Technical; Morning all, Recently some of our darling users have been trying to bypass various security measures (including impero) by booting ...
  1. #1

    Join Date
    Jul 2007
    Location
    West Sussex
    Posts
    265
    Thank Post
    35
    Thanked 11 Times in 11 Posts
    Rep Power
    16

    Disabling Safe mode and Boot Menu

    Morning all,

    Recently some of our darling users have been trying to bypass various security measures (including impero) by booting the PC in safe mode with networking.

    We have done some research and found that running a script on the machine to prevent access to safe mode or the boot menu works like a charm. The script looks like:

    @echo OFF
    bcdedit /set {bootmgr} displaybootmenu no
    bcdedit /set {default} bootstatuspolicy ignoreallfailures

    PAUSE

    My question is, can I just add this to the logon script or is it best just run manually once per machine (or groups via impero)?

    Thanks

  2. #2

    Norphy's Avatar
    Join Date
    Jan 2006
    Location
    Harpenden
    Posts
    2,494
    Thank Post
    57
    Thanked 346 Times in 267 Posts
    Blog Entries
    6
    Rep Power
    127
    Don't run it as a login script as that will run in the user's security context and won't work. Run it as a startup script, that will then run as system and work fine.

    You'll probably want to some logic in there to detect whether the script has already run or not as well. Off the top of my head something like:

    Code:
    if exist c:\bcded.txt goto end
    bcdedit /set {bootmgr} displaybootmenu no > bcded.txt
    bcdedit /set {default} bootstatuspolicy ignoreallfailures >> bcded.txt
    echo all done >> c:\bcded.txt
    :end
    With that you'll capture the output from the bcdedit commands in a text file that you can examine should something go pear shaped.
    Last edited by Norphy; 8th April 2014 at 12:19 PM.

  3. Thanks to Norphy from:

    IT_Man_Dan (8th April 2014)

  4. #3

    Join Date
    Feb 2007
    Posts
    221
    Thank Post
    6
    Thanked 11 Times in 11 Posts
    Rep Power
    17
    This is what I did to get around it. Worked a treat

  5. Thanks to Liam from:

    IT_Man_Dan (8th April 2014)

  6. #4

    Join Date
    Jul 2007
    Location
    West Sussex
    Posts
    265
    Thank Post
    35
    Thanked 11 Times in 11 Posts
    Rep Power
    16
    Thanks guys, Did you run it on all workstations or just a selection?

    I'm trying to think of occasions that I might actually need to access safe mode on a client but I can't see any obvious ones. I can just reimage clients that have an issue and no data is stored locally.

    Regards

  7. #5
    fairm010's Avatar
    Join Date
    Jun 2010
    Location
    C:/Windows/System32/
    Posts
    1,308
    Thank Post
    53
    Thanked 170 Times in 150 Posts
    Rep Power
    49
    I have ran this on all our domain joined clients especially PC's used by the kids! Any problems, it's re-imaged in 15 minutes.

  8. Thanks to fairm010 from:

    IT_Man_Dan (8th April 2014)

  9. #6

    Join Date
    Jul 2007
    Location
    West Sussex
    Posts
    265
    Thank Post
    35
    Thanked 11 Times in 11 Posts
    Rep Power
    16
    Thanks, Just set it up to run via GPO :-) I'll set it to run on all domain clients.

  10. #7

    Join Date
    Feb 2007
    Posts
    221
    Thank Post
    6
    Thanked 11 Times in 11 Posts
    Rep Power
    17
    It's easily reversed in the same way applied. But it's very rare I diagnose an issue these days. Allow Wds to do it all for me. I can have it done in 15 back on the domain in the correct ou. Good old prestaged devices

SHARE:
+ Post New Thread

Similar Threads

  1. Disabling Safe Mode
    By jamiet147 in forum Windows 7
    Replies: 10
    Last Post: 11th July 2013, 02:26 PM
  2. Disable Safe Mode
    By ptotham in forum Windows 7
    Replies: 6
    Last Post: 15th November 2011, 02:39 PM
  3. XP Pro on PC will only boot into Safe Mode?
    By speckytecky in forum Windows
    Replies: 9
    Last Post: 18th September 2009, 08:32 AM
  4. [Fog] Disable the boot menu
    By edwardjrobertson in forum O/S Deployment
    Replies: 9
    Last Post: 19th August 2009, 11:32 AM
  5. Replies: 2
    Last Post: 20th January 2007, 04:58 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •