[1709, fcu] Disable access to Windows 10 "Safe Mode" etc

[staceyh74]

Hi All

 

I am sure that this has already been covered but I can’t find it.

 

How can I disable the students gaining access the windows 10 "troubleshooting tools etc. (safe mode, debugging etc.)?

 

Stacey

[ollyyllo]

You can try the following command

Reagentc /disable

Should remove all of the advanced options (system restore, cmd prompt, startup repair, system image recovery) but you will still be left with the safe mode options.

 

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/reagentc-command-line-options

Edited March 19, 2018 by ollyyllo

[staceyh74]

Great, so we are 50% there... we just need the safe mode options disabled

[mavhc]

bcdedit /set {default} recoveryenabled No

bcdedit /set {default} bootstatuspolicy ignoreallfailures

 

etc etc

[ollyyllo]

Great, so we are 50% there... we just need the safe mode options disabled

 

If you don't find a way to hide the safe mode boot options, you can set the following reg key to restrict non admin users from logging on after safe mode is launched.

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

 

SafeModeBlockNonAdmins = 1

 

https://support.microsoft.com/en-us/help/977542/a-hotfix-is-available-to-block-standard-users-from-logging-on-to-a-win

 

Still works on Windows 10 1709

Edited March 19, 2018 by ollyyllo