How do disable command prompt?

[news.microsoft.com]

Hi all
How do I disable the use of the cmd on windows 2000/XP to allow only certain
account to use the command prompt?

Thanks.

 

[Guest]

Use a Group Policy Object.

 

[Chriss3]

Disable the command prompt
User Configuration\Administrative Templates\System

Description
Prevents users from running the interactive command prompt, Cmd.exe. This
policy also determines whether batch files (.cmd and .bat) can run on the
computer.

If you enable this policy and the user tries to open a command window, the
system displays a message explaining that a policy prevents the action.

Caution

Do not prevent the computer from running batch files if the computer uses
logon, logoff, startup, or shutdown batch file scripts, or for users that
use Terminal Services.


--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[Steven L Umbach]

There is a setting in Group Policy in user configuration/administrative
templates/system - disable command prompt that could be enabled and applied
selectively to users in a domain. However on a standalone machine any Group
Policy setting will apply to every user including administrators. You also
could configure ntfs permissions on cmd.exe and command.com to allow only
permitted users/groups to execute. However, there will be multiple instances
of those files on a computer, so you will have to search for them all. Also
a user may be able to copy the executable onto their computer via
floppy/cdrom/download/etc where they may be able to use it and it is
possible that a service pack upgrade may change permissions back to
efault. -- Steve