How to modify registry to disallow Reset This PC, Safe Mode with Networking, and Restore Point

Operating Systems & Open Source Windows
1

Hello,

I am aware that this is a strange request, but it is an important one nonetheless, and one that I know is possible but have forgotten how to properly execute.

Without getting too much into the details, there are several software packages that run undetected in the background of Windows that I need to be able to ensure cannot be circumvented through the use of Reset This PC, Restore Point, and Safemode with Networking. The purpose of this is to modify / corrupt Windows system / registry files to the point thus that these features cannot be re-enabled short of booting into Windows install media and doing a clean wipe / reinstall. So, first of all, a few disclaimers:

  • I am aware that Reset This PC can be disabled via the /disable reagentc command in CMD, but this is insufficient because it can simply be re-enabled via CMD with similar ease and minimal expertise.

  • I have been able to successfully disable the effective use of “Reset This PC” (both when activated through Windows or when Windows boots into its recovery environment after failure to boot several times in a row) as well as Safe Mode with Networking. This was done by messing around with the applicable registry entries to the point at which the features no longer worked. I figured this out largely through trial and error, and with relative ease, but failed to document how I went about doing this and have forgotten how to repeat it. I have a computer in which this was successfully applied (Windows 10), if anyone is interested, although I’m certain that someone who actually knows what they’re doing in Windows Registry beyond a novice understanding could figure this out.

  • Removing a user as an administrator is not a sufficient solution, as I am looking for a solution which is effective on Administrator accounts.

So, I know this is possible, as I have done it before, and not that long ago. However, I cannot for the life of me repeat what I did. This is probably due to the fact that I am sort of a “jack of all trades, master of none” when it comes to IT, and complex registry editing for unintended uses is certainly not my strongest suit. I am fully open to try something other than what has worked for me before, if someone more knowledgeable than me has recommendations.

Thanks in advance.