ADMX Viewer
AddSystemHard.Policies.AddSystemHard• Machine

Disable standard users in Safe Mode

Download ADMX

An adversary with standard user credentials who can boot into Microsoft Windows using Safe Mode, Safe Mode with Networking, or Safe Mode with Command Prompt options may be able to bypass system protections and security functionality. To reduce this risk, users with standard credentials should be prevented from using Safe Mode options to log in. Enabling this policy will prevent standard users from opening a session in Safe Mode. Disabling this policy will allow standard users to open a session in Safe Mode.

Policy Details

Policy Name
SafeBootUserAccess
Registry Key
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
Value Name
SafeModeBlockNonAdmins
Supported On
At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-usfr-fr