Jaan Posted November 25, 2015 Posted November 25, 2015 So today a caught a student in safe mode with networking on youtube........ i was looking for a why to disable safe mode for students and found this: http://terrytlslau.tls1.cc it also links to a MS hotfix; https://support.microsoft.com/en-us/kb/977542 just wanted to know if anybody uses this method or if it's possible via GPO? cheers ------------- Block standard users to log in on Windows Safe mode To block standard users to log in on Windows Safe mode in Windows 7 and Windows 8, we can modify the following registry. 1. On a computer, log in as Administrator. 2. Launch "Registry Editor". 3. Navigate to "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System". 4. Create a new "DWORD (32-bit) Value" named "SafeModeBlockNonAdmins". 5. Double-click "SafeModeBlockNonAdmins". 6. Change the value to "1". 7. Click "OK". 8. Close "Registry Editor". When a local users of domain users log in on safe mode, Windows will show the following message. "Enforced policy permits only administrators to log on in Safe Mode". Reference: A hotfix is available to block standard users from logging on to a Windows 7-based or Windows Server 2008 R2-based computer in safe mode This posting is provided “AS IS” with no warranties, and confers no rights!
Cache Posted November 25, 2015 Posted November 25, 2015 I do and pushed it out via Group Policy Preferences. 1
Jaan Posted November 26, 2015 Author Posted November 26, 2015 I do and pushed it out via Group Policy Preferences. Thanks for that......i'm hoping to test this today, any pointers on where to find what i need to use in GPO editor? thanks again
beany1 Posted November 26, 2015 Posted November 26, 2015 You could do it as a registry modification in group policy: Preferences > Windows Settings > Registry and do the registry key you said before. 1
Jaan Posted November 26, 2015 Author Posted November 26, 2015 implemented this via GPO, works a treat, thanks all
Jaan Posted February 27, 2025 Author Posted February 27, 2025 Just realised i've overlooked this on W11 and had a WMI filter on the GPO..... anybody use the method on W11 with success? before i brick my IT suites
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now