Windows Safe Mode Boot Registry Entry Guide

This article explains the specific Windows Registry entries that govern whether a system boots into Safe Mode by default. While Windows manages boot configuration settings through the Boot Configuration Data (BCD) architecture, these parameters map directly to specific registry elements and control keys within regedit.

The Primary Safe Mode BCD Registry Entry

In modern versions of Windows, the default boot mode is controlled by the Boot Configuration Data (BCD) store, which is mounted in the Windows Registry under the BCD00000000 hive.

The exact registry key that forces Windows to boot into Safe Mode by default is located at:

HKEY_LOCAL_MACHINE\BCD00000000\Objects\{default-loader-guid}\Elements\25000080

• {default-loader-guid}: Represents the identifier of the current operating system boot entry (commonly {current} or the default GUID under HKEY_LOCAL_MACHINE\BCD00000000\Objects).
• 25000080: Represents the internal BCD integer constant BcdOSLoaderInteger_SafeBoot.

Safe Mode Values (Element Binary/DWORD)

Inside the 25000080 subkey, the binary value named Element controls the type of Safe Mode:

• 0: Minimal Safe Mode (Standard Safe Mode with essential drivers only)
• 1: Network Safe Mode (Safe Mode with networking enabled)
• 2: Directory Services Repair Mode

Deleting the 25000080 key removes the Safe Mode requirement and returns Windows to a standard boot state.

The SafeBoot Control Key

Windows also references an active runtime registry key under the System hive to manage Safe Mode state information:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Option

• Value Name: OptionValue
• Type: REG_DWORD
• Values:
  • 1 = Minimal Safe Mode
  • 2 = Network Safe Mode

Modifying Safe Boot via the Command Line

Because manual edits to the binary structures within HKEY_LOCAL_MACHINE\BCD00000000 carry a risk of boot corruption, Windows provides the BCDEdit command-line utility to modify these registry entries safely.

To enable Safe Mode:

bcdedit /set {default} safeboot minimal

To enable Safe Mode with Networking:

bcdedit /set {default} safeboot network

To remove the registry entry and return to normal boot:

bcdedit /deletevalue {default} safeboot