how to restrict command prompt

  • Thread starter Thread starter zuhair
  • Start date Start date
Hi,

In non-domain environment you can create software restriction policy for
cmd.exe and command.com. You can do it in Group Policy.

Open Group policy -> expand Computer Configuration -> Security Settings ->
Software Restriction Policies! Right click additional rule and my suggestion
is Hash rule. It is most reliable but it is still possible to get around it.
E.g. applying service pack might change e.g. cmd.exe. This will most likely
change the hash and users will be able to run cmd.exe command.

In domain environment you can e.g. change permission on file and give only
admins e.g. full control and remove all other users and groups...
Open Group policy -> expand Computer Configuration -> Security Settings ->
File System. Add file from c:\windows\system32\cmd.exe and select who has
any rights on it...

Good luck :-)
 
In Win2K you have to use File system Restriction. Since this is WinXP news
group I explained first how to do it in XP...

Mike
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Group Policy 1
Local Policy problem 6
Black rectangle 2
security/guest accounts/restrictions to d/l files etc 3
Limit command prompt to administrators 4
SRP and Run As... 1
Group Policy restrictions 1
grp policy RESTRICT saving to local disk 3

Back
Top