Introduction
Stuck in Safe Mode on Windows 10 and cannot get back to a normal desktop? Safe Mode loads only essential services and drivers so you can troubleshoot. That is useful when a driver or app breaks your system. But it becomes a problem when Windows refuses to boot normally. The fix is straightforward once you use the right steps.
This guide shows how to disable Safe Mode in Windows 10 using System Configuration, bcdedit, and the Windows Recovery Environment. You will also learn how to fix the underlying cause, such as driver faults or corrupt files. We start with fast methods, then move to deeper repairs. You will see where BitLocker fits in and how to prepare so you do not lose data. Next, you will learn what Safe Mode does and why Windows can get stuck in it.

What Safe Mode Does and Why Windows 10 Stays in It
Safe Mode starts Windows with a minimal set of drivers and services. It loads only what the system needs to boot. You often use it to remove a bad driver, malware, or a startup app that blocks normal boot. You can still work, but features like hardware acceleration and some services stay off.
Windows 10 can keep returning to Safe Mode for a few common reasons:
– You turned on the Safe boot option in System Configuration and forgot to uncheck it.
– A driver, update, or app prevents normal startup, so Windows falls back to Safe Mode.
– The boot configuration contains a safeboot flag.
– A domain or Group Policy setting on a work device enforces a Safe boot state.
Understanding the cause helps you choose the right fix. Before you change boot settings, prepare your admin access and recovery items. The next section covers what to do first to avoid data loss and roadblocks.

Before You Start: Admin Rights, BitLocker, and Backups
Make these checks before you change how the PC boots:
– Sign in with an administrator account. You need admin rights for System Configuration, bcdedit, SFC, DISM, and repair tasks.
– If the device uses BitLocker or device encryption, confirm you have the recovery key. You can find it on your Microsoft account recovery page or from your IT admin.
– Save work and back up critical files to OneDrive, a cloud backup, or an external drive.
– Disconnect nonessential USB devices, docks, or peripherals that may load drivers at boot.
You now have what you need to make safe changes. Start with the quickest fix inside Windows: uncheck Safe boot in System Configuration.
Quick Fix: Uncheck Safe Boot in System Configuration (msconfig)
If Safe Mode was enabled via System Configuration, turning it off is usually enough. This change removes the forced Safe boot setting and restores a normal boot.
Open msconfig from Safe Mode
- Press Windows key plus R.
- Type msconfig and press Enter.
- Approve the User Account Control prompt.
Disable Safe boot and Restart
- In System Configuration, open the Boot tab.
- Uncheck the Safe boot box.
- Click Apply and OK.
- Choose Restart. Your PC should restart into normal mode without the Safe Mode watermark.
If msconfig reverts or is greyed out
- Confirm you are using an administrator account.
- If Safe boot reappears after restart, a safeboot flag may exist in the boot store. Use the bcdedit method next.
- If a work or school PC reverts due to policy, see the Special Cases section first.
If System Configuration does not hold the change or you cannot access it, remove the boot flag directly with bcdedit. That is the most direct method to clear a stuck Safe Mode state.
Command-Line Method: Remove the safeboot Flag with bcdedit
The bcdedit tool edits the Boot Configuration Data. When you remove the safeboot flag, Windows stops forcing Safe Mode.
Open elevated Command Prompt or PowerShell
- Press Windows key plus X and select Windows PowerShell Admin or Command Prompt Admin.
- If you are in Safe Mode, you can still run these elevated sessions.
- Approve the User Account Control prompt.
bcdedit commands to clear safeboot
- First, list boot entries: bcdedit
- Find the Windows Boot Loader entry for Windows 10 and note the identifier, often {current}.
- Clear the flag: bcdedit /deletevalue {current} safeboot
- If present, also clear: bcdedit /deletevalue {current} safebootalternateshell
- Restart the PC. It should now attempt a normal boot.
Resolve common bcdedit errors
- Access is denied: you are not elevated. Close the window and reopen as Administrator.
- The requested system device cannot be found: run bcdedit from inside Windows, not from an offline environment, or mount the Windows volume first. You can also run Startup Repair and try again.
- Identifier mismatch: use the identifier shown by bcdedit if it is not {current} or {default}.
If the safeboot flag is gone but the system still loops into Safe Mode or fails to reach the desktop, try the Windows Recovery Environment to select a clean startup path. You can also launch several repair tools from there.
Use Advanced Startup to Exit Safe Mode (Windows RE)
Windows Recovery Environment, also called WinRE, helps you switch startup modes and run repair tools without third party software.
Navigate to Startup Settings
- Go to Settings, then Update and Security, then Recovery.
- Under Advanced startup, select Restart now.
- In WinRE, choose Troubleshoot, then Advanced options, then Startup Settings, then Restart.
Continue to Windows normally
- After the restart, you see Startup Settings. If you just need to exit Safe Mode, select Continue to Windows or choose the option that starts Windows normally.
- If it still returns to Safe Mode, proceed with repairs in the next sections.
Handle BitLocker prompts
- If BitLocker prompts for a recovery key, enter the 48 digit key you saved earlier.
- If you cannot find it, sign in to your Microsoft account on another device or contact your IT admin.
If Safe Mode persists after these steps, something continues to force it. The next step is to fix the root cause so the system does not fall back into Safe Mode again.
Fix the Root Cause So Safe Mode Does not Return (Drivers, Apps, Updates)
Exiting Safe Mode only addresses the symptom. You need to remove the driver, update, or app that triggered the problem. Start with the most recent changes.
Uninstall recent drivers and Windows updates
- Drivers: open Device Manager. Expand the device category, such as Display adapters. Right click the device, select Properties, then the Driver tab. Click Roll Back Driver if available. If not, select Uninstall device and restart.
- Windows updates: open Settings, then Windows Update, then Update history, then Uninstall updates. Remove the latest quality update or driver update that coincides with the problem.
Clean boot vs normal boot
- Perform a clean boot to isolate software conflicts. Press Windows key plus R, type msconfig, and press Enter. On the Services tab, check Hide all Microsoft services, then click Disable all. On the Startup tab, open Task Manager and disable all startup items. Restart and test.
- If the PC starts normally under a clean boot, re enable services and startup apps in small groups until you find the culprit.
Check Event Viewer and Reliability Monitor
- Event Viewer: look under Windows Logs for System and Application. Review errors at the time normal boot failed.
- Reliability Monitor: search Reliability Monitor from Start. The timeline shows critical events and recent installs that match the onset of the issue.
If these checks do not reveal a clear culprit, move on to system repair tools. They can fix corruption that locks your system into Safe Mode or blocks normal boot.
Repair System Files and Boot Records (SFC, DISM, Startup Repair)
System corruption in protected files or the component store can break normal startup. Use the built in tools to scan and repair.
Run SFC and DISM in Safe Mode with Networking
- Open an elevated Command Prompt.
- Run: sfc /scannow and wait for 100 percent completion.
- Then run: DISM /Online /Cleanup Image /RestoreHealth and wait for completion.
- Restart and test a normal boot.
Use Startup Repair from Windows RE
- Open Settings, then Update and Security, then Recovery, then select Restart now.
- Choose Troubleshoot, then Advanced options, then Startup Repair.
- Select your account and enter your password if asked. Allow the tool to run and restart the PC.
Rebuild BCD safely with bootrec
- In WinRE, open Command Prompt.
- Run these commands, one per line:
- bootrec /fixmbr
- bootrec /fixboot
- bootrec /scanos
- bootrec /rebuildbcd
- When prompted to add installations to the boot list, choose Yes. Restart and test.
If Windows still resists a normal boot, the quickest way back to stability is to roll the system back to a known good state or perform an in place repair. The next section explains those options.
Rollback Options: System Restore and In place Repair Upgrade
System Restore and an in place repair upgrade can undo harmful changes without removing your files. They are reliable when direct fixes fail.
Restore to a point before the issue
- In Safe Mode, search for Create a restore point and open it.
- Click System Restore. Pick a restore point from before the problem started.
- Follow the prompts and restart. System Restore reverts drivers, registry keys, and system files while keeping your personal files.
In place upgrade using the latest ISO
- Download the latest Windows 10 ISO using the Media Creation Tool from Microsoft.
- Mount the ISO, run setup.exe, and choose Keep personal files and apps.
- The setup refreshes Windows components while preserving data and programs. After it finishes, confirm the system boots normally.
When to Reset this PC
- If no other option works, open Settings, then Update and Security, then Recovery, then Reset this PC.
- Choose Keep my files to remove apps and settings while retaining personal data. Use Remove everything only with a verified backup.
If you manage a work device or use a device managed by an organization, policy or credentials can block changes. Read the next section before you spend time fighting a forced setting.
Special Cases: Domain PCs, Group Policy, and Credential Issues
Managed PCs often apply rules that override local changes. You need to verify policies and rights before troubleshooting further.
GPO enforcing Safe Mode or Safe boot
- An IT administrator may enforce Safe boot with scripts or Group Policy. If Safe Mode returns after each restart, ask IT to confirm that no policy forces it.
- If you administer the device, review local policies in the Local Group Policy Editor and your management platform.
Local vs Microsoft account restrictions
- Standard users cannot change many boot options. Use a local administrator or a Microsoft account with admin rights.
- If the device is encrypted, ensure you have the BitLocker key before you use WinRE or reset options.
Work with your IT administrator
- Share error messages, Event Viewer logs, and your timeline of changes.
- Request approved drivers or updates if a hardware driver caused the loop. Ask IT to remove any policy that holds the device in Safe Mode.
Once you escape the loop and restore normal boot, take a few minutes to protect the system from repeat issues. The checklist below helps lock in a stable configuration.
Safety Tips and Post Fix Checklist
A stable boot today prevents a Safe Mode loop tomorrow. Use this checklist to secure your fix.
Verify normal boot and hardware health
- Reboot twice to confirm the change sticks.
- Open Device Manager and check for warning icons.
- If crashes persist, run Windows Memory Diagnostic and your storage vendor health tools.
Create a restore point and backup
- Create a fresh restore point once the system is stable. Search Create a restore point and click Create.
- Back up important files to OneDrive or an external drive. Test that you can restore a few files.
Update BIOS or UEFI and drivers responsibly
- Update GPU, chipset, storage, and network drivers from the device vendor site.
- Update BIOS or UEFI only if the update notes mention boot stability or critical fixes. Follow vendor instructions precisely and avoid power loss during the update.

Conclusion
You now know how to disable Safe Mode in Windows 10 and how to prevent it from returning. Start with System Configuration to uncheck Safe boot. If that does not work, clear the safeboot flag with bcdedit. Use Advanced Startup when you need a clean route back to normal or access to repair tools. Fix the root cause by rolling back bad drivers or updates and by checking logs. Repair corruption with SFC, DISM, Startup Repair, and bootrec. If the system still resists, restore or repair Windows without losing your files. On managed devices, verify policy and permissions. With admin rights, a backup, and these steps, you can leave Safe Mode behind and enjoy a stable, reliable Windows desktop.
Frequently Asked Questions
Why does my PC keep booting into Safe Mode after I uncheck Safe boot?
The boot entry may still hold a safeboot flag. Open an elevated Command Prompt and run bcdedit /deletevalue {current} safeboot. If the loop continues, check for Group Policy on managed PCs, roll back recent drivers or updates, and run Startup Repair from the Windows Recovery Environment.
Will disabling Safe Mode affect BitLocker or my data?
No. Disabling Safe Mode only changes the startup mode. It does not decrypt the drive or remove files. You might see a BitLocker prompt when you use Recovery tools. Keep the 48 digit key ready and back up important files before you start.
What if bcdedit shows Access is denied in Safe Mode?
You are likely not elevated. Close the window, then open Command Prompt or PowerShell as Administrator. If errors persist, try from a local admin account, pause security tools that block boot edits, or run Startup Repair in the Windows Recovery Environment. If the BCD is damaged, rebuild it with bootrec commands.