Directions for ultimate safemode


1. Enable task scheduler in safemode

Create a .txt file , open it and copy and paste :

into it . Close and save the changes . Rename it to task.reg . Double click the file and click yes , ok to accept the changes .


2. Reboot into safemode

Reboot and tap f8 while booting . At the safemode menu select safemode from the menu . If prompted select Administrator to log in .


3. Shut down unnecessary tasks .

Press ctrl+alt+delete . Click the processes tab . Right click each process and select end process tree EXCEPT :

taskmgr.exe
explorer.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
csrss.exe
smss.exe
system
system Idle Process

Ignore the ones that won't close or reappear .


4. Shut down explorer and log into system account .

Note the time on the clock . Right click explorer and select end process tree . (from Windows Task Manager) Click file , New Task (Run...) , type cmd and press enter . At the command prompt type "at xx:xx /interactive cmd.exe" (without the quotes) and press enter (xx:xx is the time you noted in 24 hour notation plus 2 minutes) . Type exit and press enter . Close Windows Task Manager . Wait for the new command prompt to appear .

Anything that is executed from that prompt will be running in the maximum clean environment with the maximum authority .


This is the ideal environment to run antimalware apps in . Note your antimalware's apps exact paths , write them down and enter the paths at the command prompt .

Example : C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe

50% of these instructions were borrowed from here : /t107505-Run_Antispyware_as_the_System_account.html

Hi all,
A few questions before I begin this procedure.

Directions for ultimate safemode


1. Enable task scheduler in safemode

Create a .txt file , open it and copy and paste (only the green part) :

Hi nosirrah,

Thanks for the updated information. That helps. You left out one question. What is the difference between the system account and the administrator account (as logged into during safemode).

Thank you.

The system account has access to each and every file on the system . Scanning from the system account will allow scanning of every account on the system (including the admin account) .

To see the access difference in action do this (you will have to set hidden and system files as shown to do this test) :

Boot into safemode as administrator . Open C:\system volume information . It won't work .

Boot into safemode as administrator and follow my instructions to access the system desktop . Open C:\system volume information . The door is now open .

Any file or folder that will give access denied errors in the admin account will be open to you (and any scanner) from the system account .

There are also other advantages to the system desktop . You can create files here and use the security tab (xp home can only access the security tab from safemode) to set their access right to the system account only . From that point on only the system desktop can be used to open , edit or delete these files . It is a good way prevent other users from deleting or undoing your work . From the system account you can also use the security tab to take ownership of any file or folder on the system and then give any other user full access to that file or folder . You can use this trick to leave a password on an account but give other accounts access to only certain files and folders .

I have been experimenting with the system desktop only for a short time myself . There may be other useful discoveries waiting for someone to stumble onto . You seem to know what you are doing and have an inquisitive personality like myself so go do some exploring . I did not look up how to add the task scheduler to safemode , I figured it out for myself trough trial and error . It feels awesome when you discover something like this . We are in an interesting and not well documented area of windows functionality , who knows what we will find .

BTW I have noticed you helping out in the forums . Keep the the good work . We can always use more guys like you .

Hi nosirrah,
What I know how to do, I do well. All the other stuff, I ask questions. There is a lot about computers that I don't know, but I am learning.
Thank you for the lesson. And thank you for the thank you! Glad to help.

Hi nosirrah,
Ok, why can't I figure this out?

Boot into safemode..........check!
create .txt file..........right click desktop>new>Text document....check!
copy/paste green text............check!
close and save changes...........check!
rename to task.reg...........check!

double click file and click yes to accept changes? It doesn't do that. It just opens the file. Am I doing something wrong?

I am posting this here (instead of a pm) so that others might learn from my..., how do you say?, doh!

Thanks.

Directions for ultimate safemode


1. Enable task scheduler in safemode

Open My computer .

Click tools , folder options , view .

Uncheck "Hide extensions for known file types ." and click apply and then ok .

Create a .txt file , open it and copy and paste (only the green part) :

Thanks nosirrah

Ok, so that worked. Thanks. Now I have another issue. When I type:

"at xx:xx /interactive cmd.exe" >enter (from administrator account cmd

prompt in safemode). The next line says "The service is not started." I had to

hard boot. Twice (cause the first time I thought maybe I typed the time

incorrectly.) Is one of the services that I have disabled responsible for this?

Help. Thank you.

There may be a need to go to the services control panel from the admin account while in safemode and set that service to automatic .

Do this :

Boot into safemode and log in as administrator .

Go to start , run , type services.msc and press enter .

Scroll down to Task Scheduler and double click it .

Change its startup type to automatic , click apply and then reboot .

Directions for ultimate safemode


1. Enable task scheduler in safemode .

Open My computer .

Click tools , folder options , view .

Uncheck "Hide extensions for known file types ." and click apply and then ok .

Create a .txt file , open it and copy and paste (only the green part) :

Hi nosirrah,
Task Scheduler is already set to automatic in the limited account that I am surfing with right now. Will it be different in safemode?