This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 30%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
I want to disable Safe Mode for a Standard User logon. I have been searching all over the place. I have seen many articles about using bcdedit. This would include recoveryenabled, displaybootmenu, advancedoptions, bootmenupolicy, bootstatuspolicy and I think one or two others. I have used, for the {identifier} current (which shows up in my bcdedit), default, globalsettings and bootmgr. They mostly said successful for each of them.
None of them work. Both the Administrator account and the Standard User account can still go to Recovery Options, choose Restart Now, Trouble Shooting, Advanced Options, Startup Options (I think that is the order). Then, restart and they can choose to reboot into Safe Mode.
These Standard Users have Parental Controls which are bypassed when in Safe Mode. So, they know how to get there.
I have 'restarted' the computer and also shut off the computer and turned it back on.
Below is the bcdedit. Any ideas on why this is not working?
identifier {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale en-US
inherit {globalsettings}
default {current}
resumeobject {cxxxxxxxx}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
displaybootmenu No
identifier {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale en-US
inherit {bootloadersettings}
recoverysequence {xxxxxxxx}
displaymessageoverride Recovery
recoveryenabled No
advancedoptions No
isolatedcontext Yes
allowedinmemorysettings xxxxxxxxx
osdevice partition=C:
systemroot \WINDOWS
resumeobject {cxxxxxxx}
nx OptIn
bootmenupolicy Standard
bootstatuspolicy IgnoreAllFailures
Not sure how or why. But, this morning when I logged in, I tried it again. This time, when going through Recover Options to reboot into Safe Mode, it did not allow me to do so. Went straight to regular log in.
I tried shutting completely down and doing a restart last night. Still allowed me to boot into Safe Mode. But, today, it does not.
I am not sure which of the myriad of options I turned off did the trick, though.
These are the commands I used:
bcdedit /set {current} recoveryenabled No
bcdedit /set {bootmgr} displaybootmenu No
bcdedit /set {globalsettings} advancedoptions false
bcdedit /set {current} bootmenupolicy standard
bcdedit /set {current} bootstatuspolicy ignoreallfailures
NOTE: I used those identifiers. But, I also used default, globalsettings and bootmgr for all the commands as well. Whether you use current or default, according the websites I looked at, depends on the identifier for where the parameter is set. Outside of the globalsettings one (not sure why ‘advancedoptions’ ended up in the Windows Boot Loader though).
I believe its recovery feature of Microsoft and Microsoft has kept for troubleshooting purpose. Hence this feature is by design and can not be turned off.
However you can make user as Normal user and not Administrator so that you will not able to perform any Administrative related tasks even in safe mode.
--If the reply is helpful, please Upvote and Accept as answer--
