Security

Ask something
Discussion Locked

Stop Access to Safe Mode in Windows 98

0 helpful
8 replies

by realblondie

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How do I prevent anyone from accessing safe mode during boot up? Stopping access would prevent users from changing window settings/programs/security, etc.

8 replies

by paul d. masley

Microsoft has an unsupported program called TweakUI. With this program, which is similar to NT poledit, you can disable the startup to a point that only the GUI will start. make sure that you use TweakUI98 from either a standard WIN98 disk (not onSE) or download it. It is available on ZDNET. Do not us the program from WIN95. It is not compatible.

by realblondie

I have tried TweakUI98 but, I cannot use it. The reason being is because TweakUI98 does not give me the flexibility of control that poledit does and it seems to remember policies, even though you had changed that policy. Is there a way, in the sysedit that I can change instead when the PC boots? Thank you.

by corewarrior

Msdos.sys is a text file win98 uses to check for boot configuration info.
Edit the MSDOS.sys file to reduce the time it waits for the ketstrokes to enter the startup menu.Other option can be diabled,enabled etc..Check the win98 cd for resource kit.It contains a utility for making changes to the msdos.sys file

by corewarrior

This work around is not the best solution.A user could still boot to a command prompt and then use the Win.com switch win.com /d:m to boot into safe mode.
In addtion to the msdos.sys bootdelay function there is the Bootkey=x function.
Excerpt formMS Win98 RK

BootKeys= Enables the startup option keys (that is, F5, F6, and F8). The default is 1. Setting this value to 0 overrides the value of BootDelay=n and prevents any startup keys from functioning. This setting allows system administrators to configure more secure systems.

by realblondie

I did what you suggested but, still very unclear about your answer. Do I include? Add these values? Even our techs didn't understand your answer. Sorry. Could you please make it a little more clearer?

by dr dij

use program like WinShield (there is one other pgm also). It does the registry tweeks needed, with menu driven click selection. Instead of manually doing reg changes taking 15 minutes, it takes 30 seconds. Can also make control panel disappear and lock down printer and network settings, 60 some options to lock down, can prevent dos mode, dos mode reboot, safe mode reboot. remember if you do this can be no way to recover bad and have to reghost hd.

to install new sw or make chgs, just unlock it with password you type in, reboot and make chgs. then lock it down again for users.

Add in to prevent boot off a: drive and it is almost impossible to defeat.

This discussion is closed to new replies.