none
Restrict Access to Safe Mode in Windows 8.1 RRS feed

  • Question

  • When we first introduced Windows 8 workstations, you could only access Windows 8 in Safe mode if you were a member of the Administrators group in AD, however it has come to my attention that any AD User can now access safe mode.

    I can see there is a Hotfix to prevent this in Windows 7, but there doesn't appear to be one for Windows 8/8.1. Does anyone know how to restrict access to Safe Mode to Domain Administrators only please?

    Thanks in advance,

    Mr..D

    vendredi 12 février 2016 14:17

Réponses

  • Hi Mr..D,

     

    Based on your description, we may try to modify registry to restrict access to Safe Mode. Please refer to the steps.

    1. On a computer, log in as Administrator.

     

    2. Launch "Registry Editor".

     

    3. Navigate to "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System".

     

    4. Create a new "DWORD (32-bit) Value" named "SafeModeBlockNonAdmins".

     

    5. Double-click "SafeModeBlockNonAdmins".

     

    6. Change the value to "1" then Click "OK".

     

    Please be careful while working in the registry. Make sure you create a backup of Registry before you proceed.

     

    After that, when a local users of domain users log in on safe mode, Windows will show the following message.

    "Enforced policy permits only administrators to log on in Safe Mode".

     

     

    Refer to the link:

    http://terrytlslau.tls1.cc/2013/04/block-standard-users-to-log-in-on.html

    Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Best Regards,

    Tao

     


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marqué comme réponse Mr..D lundi 22 février 2016 13:47
    lundi 15 février 2016 12:38
    Modérateur

Toutes les réponses

  • Hi Mr..D,

     

    Based on your description, we may try to modify registry to restrict access to Safe Mode. Please refer to the steps.

    1. On a computer, log in as Administrator.

     

    2. Launch "Registry Editor".

     

    3. Navigate to "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System".

     

    4. Create a new "DWORD (32-bit) Value" named "SafeModeBlockNonAdmins".

     

    5. Double-click "SafeModeBlockNonAdmins".

     

    6. Change the value to "1" then Click "OK".

     

    Please be careful while working in the registry. Make sure you create a backup of Registry before you proceed.

     

    After that, when a local users of domain users log in on safe mode, Windows will show the following message.

    "Enforced policy permits only administrators to log on in Safe Mode".

     

     

    Refer to the link:

    http://terrytlslau.tls1.cc/2013/04/block-standard-users-to-log-in-on.html

    Please Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Best Regards,

    Tao

     


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Marqué comme réponse Mr..D lundi 22 février 2016 13:47
    lundi 15 février 2016 12:38
    Modérateur
  • I had seen that registry key documented, but assumed it also required the hotfix which wasn't available for Windows 8. Anyway, the key works a treat. Thank you.
    lundi 22 février 2016 13:48