Command Prompt Security Question

[Robert Paris]

I am looking for how I can do the following on Win2K:

1. In disabling cmd.exe, can I set up only two programs to run (on startup)
in command prompts (with RunAs service) - they're java programs - and still
keep all other java programs and the user from being able to do anything in
command prompt?

Any pointers to further resources would be great too! Thanks!

 

[Jerold Schulman]

I am looking for how I can do the following on Win2K:

1. In disabling cmd.exe, can I set up only two programs to run (on startup)
in command prompts (with RunAs service) - they're java programs - and still
keep all other java programs and the user from being able to do anything in
command prompt?

Any pointers to further resources would be great too! Thanks!

Deny all but the RunAs account read and execute permissions on CMD.EXE.

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[David Candy]

The terminal window isn't cmd or any other programs. Programs like cmd, ping, command, tracert, etc just write to the terminal window. Ping, for example, does not use cmd unless started from cmd. The window is completely seperate from a command interpreter (either).