Limit command prompt to administrators

[Jerry W]

Is there an easy way to limit access to the Command
Prompt to administrators only in Windows XP Pro? (i.e.,
prevent limited/restricted users from accessing it?)

 

[David Jones]

Use NTFS as your file system, and set NTFS permissions on
cmd.exe and command.com and remove the Execute and Write
permissions to the Users group (or specific users).

Help & Support has more information on how to work with
NTFS permissions.

Note that any programs that try to run the command prompt
may fail to work properly on those accounts as well.

 

[Doug Knox MS-MVP]

See www.dougknox.com, Win XP Utilities, Windows XP Security Console. This
restriction, among a host of others, can be controlled on a per user basis,
in the System Security section.

 

[Steven L Umbach]

You can use Group Policy user configuration/administrative templates/system/prevent
access to the command prompt. For a domain you could filter the policy to not affect
administrators otherwise use Software Restriction Policies to create a hash rule to
not allow cmd.exe and command.com and configure the enforcement rule to not restrict
local administrators. --- Steve

http://support.microsoft.com/?kbid=310791

 

[Roger Abell]

Be aware the the method Jerry outlines is absolute,
whereas policy based methods are limited to uses
when from within Explorer.