I am investigating the behavior and configuration of Safe Mode in recent versions of Windows (specifically Windows 10 and Windows 11) for advanced troubleshooting scenarios. I understand that Safe Mode initiates a minimal set of drivers and services, but I require a deeper technical explanation of its operational differences compared to the normal boot sequence.
Specifically, I am interested in the following points:
- Which system components and drivers are intentionally excluded from Safe Mode, and what is the rationale for their exclusion?
- How does the registry configuration change, if at all, during a Safe Mode boot, and are there any documented differences in system services or kernel modules?
- In scenarios where network access is required, what security or functional limitations exist in Safe Mode with Networking compared to a regular network session?
- Are there supported methods to customize the Safe Mode environment for targeted diagnostics, such as selectively enabling additional components without fully transitioning to normal mode?
Any insights, references to official Microsoft documentation, or experiences with tailoring Safe Mode for enhanced troubleshooting would be greatly appreciated.