Hello @James Walton ,
Thank you for your update.
We can try the following step to check if we can find any app/program to check the option "safe mode".
1.Download Process monitor here on this server.
2.Right click the Procmon.exe and run as Administrator.
3.Use Selective startup without Safe boot combination as screenshot I provided above.
4.Check "Enable Boot Logging" under "Option".
5.Restart the server.
6.Check if the safe mode is checked again? If so, open Right click the Procmon.exe and run as Administrator and save the boot logging file.
7.Try to find any thing (any app\program) is check "safe mode" during server booting in save the boot logging file.
1.You can also capture a normal boot logging on another normal machine to compare them.
2.Due to security issues, the log may contain private information, and the forum is not convenient to analyze the customer's log. It is recommended that you try this method to check for any findings yourself.
Thank you for your understanding and support.