none
Restrict Access to Safe Mode in Windows 8.1

    Question

  • When we first introduced Windows 8 workstations, you could only access Windows 8 in Safe mode if you were a member of the Administrators group in AD, however it has come to my attention that any AD User can now access safe mode.

    I can see there is a Hotfix to prevent this in Windows 7, but there doesn't appear to be one for Windows 8/8.1. Does anyone know how to restrict access to Safe Mode to Domain Administrators only please?

    Thanks in advance,

    Mr..D

    Friday, February 12, 2016 2:17 PM

Answers

  • Hi Mr..D,

     

    Based on your description, we may try to modify registry to restrict access to Safe Mode. Please refer to the steps.

    1. On a computer, log in as Administrator.

     

    2. Launch "Registry Editor".

     

    3. Navigate to "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System".

     

    4. Create a new "DWORD (32-bit) Value" named "SafeModeBlockNonAdmins".

     

    5. Double-click "SafeModeBlockNonAdmins".

     

    6. Change the value to "1" then Click "OK".

     

    Please be careful while working in the registry. Make sure you create a backup of Registry before you proceed.

     

    After that, when a local users of domain users log in on safe mode, Windows will show the following message.

    "Enforced policy permits only administrators to log on in Safe Mode".

     

     

    Refer to the link:

    http://terrytlslau.tls1.cc/2013/04/block-standard-users-to-log-in-on.html

    Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Best Regards,

    Tao

     


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marked as answer by Mr..D Monday, February 22, 2016 1:47 PM
    Monday, February 15, 2016 12:38 PM
    Moderator

All replies

  • Hi Mr..D,

     

    Based on your description, we may try to modify registry to restrict access to Safe Mode. Please refer to the steps.

    1. On a computer, log in as Administrator.

     

    2. Launch "Registry Editor".

     

    3. Navigate to "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System".

     

    4. Create a new "DWORD (32-bit) Value" named "SafeModeBlockNonAdmins".

     

    5. Double-click "SafeModeBlockNonAdmins".

     

    6. Change the value to "1" then Click "OK".

     

    Please be careful while working in the registry. Make sure you create a backup of Registry before you proceed.

     

    After that, when a local users of domain users log in on safe mode, Windows will show the following message.

    "Enforced policy permits only administrators to log on in Safe Mode".

     

     

    Refer to the link:

    http://terrytlslau.tls1.cc/2013/04/block-standard-users-to-log-in-on.html

    Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Best Regards,

    Tao

     


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marked as answer by Mr..D Monday, February 22, 2016 1:47 PM
    Monday, February 15, 2016 12:38 PM
    Moderator
  • I had seen that registry key documented, but assumed it also required the hotfix which wasn't available for Windows 8. Anyway, the key works a treat. Thank you.
    Monday, February 22, 2016 1:48 PM