Disabling Safe Mode

[jamiet147]

Hi All,

 

Sorry for another Safe Mode post but i'm having trouble deleting the following registry entries

 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318

 

 

My bulk method of deleting these was with group policy (Computer Configuration > Preferences > Registry) but after this didn't work I tried to delete these manually on my machine only to find the permissions for the HKEY_LOCAL_MACHINE are set to read only.

 

Can anyone recommend a bulk way to change the permissions for HKEY_LOCAL_MAHINE using group policy or is there a better way to disable safe mode in Windows 7

 

 

Thanks

Jamie

[bondbill2k2]

You could just use a GPO startup script on workstations to remove the registry. Is there any need to disable safe mode tho?

[jamiet147]

Hi,

 

 

I've got a few of the little darlings who have worked out that booting the machine into safe mode (with networking) will let them logon as normal but won't apply any GPOs giving them access to task manager/cmd/C drive.

 

I've tried running this .VBS

On Error Resume next

Dim WSHShell
Set WSHShell = WScript.CreateObject("WScript.Shell")

' Delete mouse driver for safe mode
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet002\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}\"

' Delete keyboard driver for safe mode
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet002\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}\"
WSHShell.RegDelete "HKLM\SYSTEM\ControlSet002\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}\"

Set WSHShell = Nothing

 

Posted here but my problem seems to be the permissions for the key in the registy only giving admins read access?

 

 

Thanks

Jamie

[mac_shinobi]

http://www.edugeek.net/forums/windows/2939-disable-f8-now-3.html#post647374

 

Edited version of NTLDR or adjusting / editing the masterboot record

[Arthur]

is there a better way to disable safe mode in Windows 7

Disabling the boot menu is one way to do it.

 

bcdedit /set {bootmgr} displaybootmenu no

 

the permissions for the key in the registy only giving admins read access?

Correct. TrustedInstaller is the only user allowed to edit those registry keys.

 

http://i.imgur.com/PbVHH.png

[madisonmiller]

Hi,

While disabling the f8 key u can be able to boot ur drive and Edited version of NTLDR or adjusting / editing the masterboot record.

[Garacesh]

http://www.edugeek.net/forums/windows/2939-disable-f8-now-3.html#post647374

 

Edited version of NTLDR or adjusting / editing the masterboot record

That'll just make it a little slower to get into safemode. They can still boot the PC up, hold down the power button, then go into safe mode when it complains of an improper shutdown, can't they?

[jamiet147]

Thanks Arthur!

 

 

Adding "bcdedit /set {bootmgr} displaybootmenu no" to the startup script has sorted it.

 

 

 

Cheers

Jamie

[timbo343]

Just to drag this up again, we have disabled safe mode via F8 however our students have found another way, if you turn the machine off during boot up you get the safe mode option screen. Does anyone know a solution to this?

[Garacesh]

IgnoreAllFailures disables the option for Startup Repair.. Perhaps it disables the option of Safe Mode.

 

Give this a try:

bcdedit /set {default} bootstatuspolicy ignoreallfailures

No guarantee, side effects may include.. yadda yadda yadda.

[timbo343]

IgnoreAllFailures disables the option for Startup Repair.. Perhaps it disables the option of Safe Mode.

 

Give this a try:

bcdedit /set {default} bootstatuspolicy ignoreallfailures

No guarantee, side effects may include.. yadda yadda yadda.

 

The command works and disables the whole unexpected shutdown message too.