For better security protection you need to modify some options in the system file MSDOS.SYS, since the program can't start in Safe Mode. These boot settings are available for Windows 9.x/ME only .
Set the following options to add these settings or to change existing settings in the section [Option] of MSDOS.SYS:
Disables interruption keys - sets BootKeys=0
By default Windows 9x enables the function keys on boot, these allow you to control the boot process. For example pressing F5 while the "Starting Windows 95..." message is displayed will boot Windows in Safe Mode. This option allows you to disable the F5, F6 and F8 keys. This option will affect all users of the computer.
Disables boot menu - sets BootMenu=0
If you installed an upgrade version of Windows 9x, you can normally press F4 to boot your previous version of Windows. This option can be disabled. This option will affect all users of the computer.
Disables the Safe Mode startup warning - sets BootWarn=0
Enabling the setting suppresses the safe mode warning message when booting up, and bypasses the Startup menu. This option will affect all users of the computer.
Require Validation by Network for Windows Access - By default Windows doesn't require a valid user name and password combination for a user to create and use a local Windows machine. This functionality can be changed to require this validation.
If your computer is connected to a network, make sure that the network is available and works properly, because validation of users will be done through the network. If the network is unavailable then you will not be able to access your computer. If you have a notebook computer, which you often disconnect from your corporate network, you should set the "Microsoft Family Logon" as a default way of logon in the network configuration. It will allow you to access to your computer outside the corporate network.
If your computer is not connected to a network then you need to create at least one user profile, and to assign a password for it. Make sure that the "Microsoft Family Logon" is enabled in the NetWork configuration and set as a current way of logon. To create a user profile, use the item "Users" in the "Control Panel". The "Microsoft Family Logon" will be automatically installed and enabled after creating the first user profile. If the "Microsoft Family Logon" is still not enabled, use the "Network" item in the "Control Panel" and install it by itself.
The "Microsoft Family Logon" is a network client, which is intended to emulate multi user access on a computer, when it is not connected to a real network.
WARNING: You should be carefully using the option "Require Validation by Network for Windows Access"
NOTE : You need to reboot the computer for these restrictions to come into force.
IMPORTANT: For the highest possible level of security in addition to the above settings it is necessary to make a change to the CMOS of your computer system. The Boot Order needs to be changed from A:then C:\ to C:then A:\. This prevents booting the system from a floppy boot disk unless the C:\ drive is non-functional. Use CMOS password protection to prevent unauthorized changes to this and other settings. Check the documentation that came with your computer for directions how to change your CMOS settings.
See also :
Quick Start
Main menu - File
Administrator's password