Solved

Disable Safe Mode boot options in W2K

Posted on 2006-06-15
12
622 Views
Last Modified: 2008-02-01
Hi

I need to disable the safe mode boot options (particularly safe mode with command prompt) when you press F8 on startup in Windows 2000.  

Can anybody help?
0
Comment
Question by:Illuminas
  • 6
  • 2
  • 2
12 Comments
 
LVL 11

Assisted Solution

by:A. Cristian Csiki
A. Cristian Csiki earned 100 total points
ID: 16911565
hi Illuminas,
Here are some tips how to kill save mode. Delete this registry keys:

-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode
-HKEY_USERS\S-1-5-21-73586283-1592454029-839522115-1004\Software\Microsoft\InternetExplorer\Desktop\SafeMode
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot
-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\SafeBoot
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot

* Note: before doing this export them, so you can add them back to restore the save mode.

Good luck
0
 
LVL 22

Expert Comment

by:pjedmond
ID: 16915371
This is probably more effective - a beautiful hack for the ntldr:

http://mcpmag.com/columns/article.asp?EditorialsID=1262

Obviously make a backup of your ntldr first:)
0
 

Author Comment

by:Illuminas
ID: 16919154
Thanks for this nodramas.


In case others are interested...deleting these registry keys throws up a blue screen if Safe Mode, Safe Mode with Command Prompt, and Safe Mode with Networking are selected.

pjedmond - I would have preferred your solution but unfortunately it didn't work.  Perhaps because the solution was for an XP machine (I'm trying to apply this on W2K SP4 machines).

I'll leave this open for a bit to see if anyone has a cleaner solution than deleting registry keys.
0
 
LVL 11

Expert Comment

by:A. Cristian Csiki
ID: 16919874
Illuminas!
I tried my tip and worked on xp. When save mode is atempting to load he automatic restarts and so on. NO blue screen i had.

Other wise people sad tried that before me and worked as well. see :
http://www.experts-exchange.com/Security/Q_20657102.html

Regards, nodramas
0
 
LVL 22

Expert Comment

by:pjedmond
ID: 16920797
Looks like some bootloaders have the capability to control keystrokes during boot, which can be used to prevent the Safe mode from being accessed (without a password):

http://www.masterbooter.com/main/features_en.html

is one that I've found and may offer another avenue to explore?
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 22

Expert Comment

by:pjedmond
ID: 16920833
Not very elegant!:
-------------8X-------------
How do I disable Safe Mode? (NT, 2000, XP)

    Windows NT, 2000 and XP do not have any easy way to disable Safe Mode. However, there is a way to 'break' safe mode temporarily.

    Doing this is not recommended. Proceed at your own risk!
    Click on the Start Button
    Select Run
    Type in "regedit" and hit OK
    Expand the left hand side to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot
    Under SafeBoot, you should now see Minimal and Network. Click on them and hit F2 to rename them to "Minimal-" and "Network-", respectively.

    This should cause Windows to crash the next time it is booted into Safe Mode.
-------------8X-------------
0
 
LVL 22

Accepted Solution

by:
pjedmond earned 150 total points
ID: 16921313
Wooohoooo - Progress:

Edit the C:\boot.ini file

There should be a line that says:

timeout=30

or similar.

Change it to:

timeout=0

..and guess what, you get 0 seconds after pressing F8 to select a boot mode. (This effectively prevents the use of F8). Now to work on F5?

0
 
LVL 22

Expert Comment

by:pjedmond
ID: 16921582
OK - I have one working - Not very clean/elegant, but very effective.

Again based arount the ntldr. Obviously, this is all done *AT YOUR OWN RISK*!!!! Towards the end of the file you will see a number of ASCII text elements. (These are the ntldr commands that are passed to the loading process) Unfortunately, not as simple as the one for XP, but combined with thr timeout=0, you may be able to find the one that is triggered by F5. I just changed them all.

Using your favourite hex editor, edit SAFEBOOT and change it to BOOTLOG .

There is a space after the BOOTLOG in order to avoid changing any addresses anywhere else in the program. It may be that you only need to change one of them in order to prevent a direct boot into safe mode.....but I just changed them all!

What this does is change SAFEBOOT to LOGGING:)...hence preventing anyone entering safe mode:)

I'm feeling quite please with that!
0
 

Author Comment

by:Illuminas
ID: 16959842
Hi pjedmond

Sorry I've been away so haven't been able to comment.  Thanks for your suggestions.

I couldn't find boot.ini (I've enabled "see hidden files and folders") - this sounded like the best option.

I found the word SAFEBOOT in ntldr but it just looked like a display prompt - "Press ESCAPE to disable safeboot and boot normally".  I changed the word safeboot to bootlog which caused no difference in my boot options.  I'm sure I'm doing something incorrect here - can you tell me where I change SAFEBOOT to BOOTLOG (my first time using a hex editor with ntldr).

Cheers

Illuminas
0
 
LVL 22

Expert Comment

by:pjedmond
ID: 17097951
OK - I failed to keep up with this one.

>can you tell me where I change SAFEBOOT to BOOTLOG

Everywhere it appears ensuring that you do not increase or reduce the number of chars in the file.

>I couldn't find boot.ini

A problem in itself?

(   (()
(`-' _\
 ''  ''



0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Hello I read in a discussion about a person who configured a very simple mirror RAID with two hard drives; the system and data were on the same partition. He asked how to repair the system as it was not booting up anymore. In his case running …
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now